CVE-2026-118041
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Nov 11, 2026
Vendor
unknown
Description
The Contest Gallery WordPress plugin before 34.0.3 does not sanitise the name of files uploaded through its e-commerce sale file-replacement feature, allowing authenticated users with Author-level access and above to write files with an arbitrary name and extension to a web-accessible directory and, by overwriting the directory's protection file through the same flow, achieve Remote Code Execution.