CVE-2026-1306 impacts the midi-Synth plugin for WordPress, versions up to and including 1.1.0, allowing unauthenticated arbitrary file uploads due to missing validation in the 'export' AJAX action. Rated Critical with a CVSS score of 9.8, this vulnerability enables remote attackers to upload malicious files without authentication or user interaction, potentially leading to remote code execution, as the required nonce is trivially accessible in frontend JavaScript. While not yet in CISA's KEV, exploit code for this vulnerability has been confirmed to exist, with community discussions indicating the availability of Nuclei templates and active monitoring.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Adminkov | Midi-Synth | >= 0, <= 1.1.0CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.