medium5.3
CVE-2026-1969
The trx_addons WordPress plugin before 2.38.5 does not correctly validate file types in one of its AJAX action, allowing unauthenticated users to upload arbitr…
Impact
The trx_addons WordPress plugin before 2.38.5 does not correctly validate file types in one of its AJAX action, allowing unauthenticated users to upload arbitrary file. This is due to an incorrect fix of CVE-2024-13448
Affected products
| Product | Affected versions |
|---|---|
| Trx Addons WordPress Plugin | before 2.38.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.