PT-2026-23403 · WordPress · Wp Chill Filr

Que Thanh Tuan · Publicado 2026-03-05 · Atualizado 2026-03-05 · CVE-2026-28133

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP Chill Filr versions prior to 1.2.13

Description A flaw exists in WP Chill Filr filr-protection that permits the upload of a web shell to a web server. This is due to unrestricted file upload with a dangerous type. The issue allows for the potential compromise of the server through malicious file uploads.

Recommendations Update WP Chill Filr to version 1.2.13 or later.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2026-28133

Produtos afetados

Wp Chill Filr

Referências · 3

• https://twitter.com/CVEnew/status/2029454829786153298 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/filr-protection/vulnerability/wordpress-filr-plugin-1-2-12-arbitrary-file-upload-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-28133 · Nota de Segurança