Skip to content
Threat Feed

Tag

Cve-2026-4132

1 brief RSS
critical advisory

WordPress HTTP Headers Plugin Remote Code Execution via File Path Manipulation (CVE-2026-4132)

The HTTP Headers WordPress plugin is vulnerable to remote code execution (RCE) due to insufficient validation of the htpasswd file path and lack of sanitization of the username, allowing authenticated administrators to write arbitrary code to the server.

wordpress rce plugin cve-2026-4132
2r 1t 1c