Product

LightSync Pro (2.1.6 and Earlier)

1 brief RSS

Arbitrary File Upload Vulnerability in LightSync Pro Plugin for WordPress

The LightSync Pro plugin for WordPress, in versions up to and including 2.1.6, contains an arbitrary file upload vulnerability via the rest_replace_media() function, enabling authenticated attackers to achieve remote code execution.

LightSync Pro wordpress arbitrary-file-upload cve-2026-6147 rce plugin-vulnerability

1r 1t 1c 1d ago