CPE

Cpe:2.3:a:midi-Synth_project:midi-Synth:::*:::wordpress::

1 brief RSS

midi-Synth: Unauthenticated arbitrary file upload remote code execution (CVE-2026-1306)

A critical unauthenticated arbitrary file upload vulnerability in the WordPress plugin midi-Synth (CVE-2026-1306) allows remote attackers to achieve full server compromise by uploading and executing arbitrary PHP files via the admin-ajax.php endpoint.

midi-Synth wordpress arbitrary-file-upload rce web-application-vulnerability

1r 2t 1c 6m ago

Cpe:2.3:a:midi-Synth_project:midi-Synth:*:*:*:*:*:wordpress:*:*

midi-Synth: Unauthenticated arbitrary file upload remote code execution (CVE-2026-1306)

Cpe:2.3:a:midi-Synth_project:midi-Synth:::*:::wordpress::