Post

Another day, another WP plugin writeup 🫡 cryptocat.me/blog/researc...

cryptocat.meContact Form Entries Unauthenticated Arbitrary File Copy to File Read | CVE-2026-9145 | CryptoCat's BlogRoot cause analysis of CVE-2026-9145 in Contact Form Entries, where the 1.5.1 rewrite of create_entry_el() fed an Elementor upload field's raw POST value into PHP copy(), letting an unauthenticated at...

14/7/26, 9:05 am0 reposts0 likes

No replies yet.