Skip to content
Threat Feed

Product

Career Section Plugin

1 brief RSS
critical threat

CVE-2026-6271: WordPress Career Section Plugin Arbitrary File Upload Vulnerability

The Career Section plugin for WordPress is vulnerable to arbitrary file upload in versions up to 1.7 due to missing file type validation in the CV upload handler, potentially leading to remote code execution.

Career Section plugin arbitrary file upload remote code execution wordpress plugin
2r 1c