Skip to content
Threat Feed
Subscribe

Vendor

GoDAM

1 brief RSS
critical advisory

GoDAM WordPress Plugin Arbitrary File Upload Vulnerability (CVE-2026-14282)

An arbitrary file upload vulnerability exists in the GoDAM WordPress plugin versions up to and including 1.12.2 due to insufficient file type validation in the `save_video_file()` function, allowing unauthenticated attackers to upload arbitrary files to the server and potentially achieve remote code execution.

GoDAM - Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Vid... <= 1.12.2 wordpress arbitrary-file-upload remote-code-execution web-exploitation
1r 2t 1c