CVE-2026-14560
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 11, 2026
Vendor
unknown
Description
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server.