HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-34856 — UAF vulnerability in the communication module. Impact: Successful exploitation o...

·Source: NIST NVD

Updated:

Executive Summary

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

Analysis

UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. CVSS Score: 7.3. Published: 2026-04-13T04:16:12.437.

Indicators of Compromise (1)

CVE (1)
CVE-2026-34856
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Apr 13, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2024-58349 — WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerabilit...

WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to the theme directory and execute them to achieve remote code execution on the affected WordPress installation.

CVE-2024-58349
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2024-58348 — WordPress Background Image Cropper version 1.2 contains a remote code execution ...

WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. Attackers can upload PHP files through the file upload form in the plugin directory to execute arbitrary code on the server.

CVE-2024-58348
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2023-54352 — WordPress Seotheme contains a remote code execution vulnerability that allows un...

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seotheme/mar.php to execute system commands and upload additional files for persistent access.

CVE-2023-54352
NIST NVD