{"id":"CVE-2026-104028","published":"2026-10-11T07:17:22.440","lastModified":"2026-10-13T20:36:00.850","description":"The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-434"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/0be8a03e-d854-48db-bdc0-1beead3d7b91/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Anton Extensions WordPress plugin allows unauthenticated attackers to upload arbitrary PHP files to any location on the server due to missing capability checks, nonce verification, and file-type validation. This vulnerability leads to remote code execution and can be exploited by anyone with access to the plugin's upload endpoint.","exploitability":"Exploitation is straightforward with no prerequisites; attackers can directly upload malicious PHP files to arbitrary paths without authentication or additional setup.","blast_radius":"The impact could be severe across all WordPress sites using the affected plugin version, potentially leading to full server compromise and data exfiltration.","remediation":"Upgrade to Anton Extensions plugin version 1.2.3 or later to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","wordpress","upload"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:50:17.855Z"}}