CVE-2026-1969

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1969", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2026-02-05T13:15:10.756Z", "datePublished": "2026-03-23T06:00:04.026Z", "dateUpdated": "2026-03-23T13:25:48.548Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-03-23T06:00:04.026Z"}, "title": "ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload", "problemTypes": [{"descriptions": [{"description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "trx_addons", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThan": "2.38.5"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The trx_addons WordPress plugin before 2.38.5 does not correctly validate file types in one of its AJAX action, allowing unauthenticated users to upload arbitrary file. This is due to an incorrect fix of CVE-2024-13448"}], "references": [{"url": "https://wpscan.com/vulnerability/762530ae-80a5-4ff8-9725-6adab9498c33/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Erwan LR (WPScan)", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-434", "lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-03-23T13:25:18.799521Z", "id": "CVE-2026-1969", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T13:25:48.548Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-1969", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-23T13:25:18.799521Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T13:25:31.827Z"}}], "cna": {"title": "ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Erwan LR (WPScan)"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "trx_addons", "versions": [{"status": "affected", "version": "0", "lessThan": "2.38.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/762530ae-80a5-4ff8-9725-6adab9498c33/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The trx_addons WordPress plugin before 2.38.5 does not correctly validate file types in one of its AJAX action, allowing unauthenticated users to upload arbitrary file. This is due to an incorrect fix of CVE-2024-13448"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-03-23T06:00:04.026Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1969", "state": "PUBLISHED", "dateUpdated": "2026-03-23T13:25:48.548Z", "dateReserved": "2026-02-05T13:15:10.756Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2026-03-23T06:00:04.026Z", "assignerShortName": "WPScan"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "trx_addons", "vendor": "Unknown", "versions": [{"lessThan": "2.38.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "contact@wpscan.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The trx_addons WordPress plugin before 2.38.5 does not correctly validate file types in one of its AJAX action, allowing unauthenticated users to upload arbitrary file. This is due to an incorrect fix of CVE-2024-13448"}, {"lang": "es", "value": "El plugin de WordPress trx_addons anterior a la versi\u00f3n 2.38.5 no valida correctamente los tipos de archivo en una de sus acciones AJAX, permitiendo a usuarios no autenticados subir un archivo arbitrario. Esto se debe a una correcci\u00f3n incorrecta de CVE-2024-13448."}], "id": "CVE-2026-1969", "lastModified": "2026-06-17T10:16:47.907", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1969", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-23T13:25:18.799521Z", "version": "2.0.3"}}]}, "published": "2026-03-23T06:16:20.257", "references": [{"source": "contact@wpscan.com", "url": "https://wpscan.com/vulnerability/762530ae-80a5-4ff8-9725-6adab9498c33/"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.38.5)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "trx_addons", "source": "cna", "vendor": "Unknown"}, "product": "addons", "vendor": "themerex"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-03-23T16:05:18.738794+00:00", "value": {"mitigation_remediation": ["Upgrade the ThemeREX Addons plugin to version 2.38.5 or later", "Verify that the plugin files have been replaced and no legacy vulnerable code remains", "Monitor the vendor\u2019s announcements for any additional security patches"], "summary": {"action": "Patch", "impact": "Unauthenticated arbitrary file upload that can lead to remote code execution"}, "threat_synthesis": {"affected_systems": "The vulnerability affects all installations of ThemeREX Addons that use a version older than 2.38.5. No other products or vendor versions are specifically identified in the advisory. Sites that have not yet updated the plugin are therefore exposed to this risk.", "description_and_impact": "The WordPress plugin ThemeREX Addons (trx_addons) contains an AJAX endpoint that accepts file uploads without correctly validating the file type. An attacker can therefore upload any file, including executable scripts. If the file is executed on the server, the attacker gains the ability to run arbitrary code, modify site content, or compromise sensitive data. This flaw is a classic example of arbitrary file upload vulnerability (CWE\u2011434) and poses a moderate risk to confidentiality, integrity and availability.", "risk_and_exploitability": "The CVSS v3.1 score of 5.3 reflects moderate severity, while the EPSS probability of less than 1% suggests a low likelihood of exploitation under current threat conditions. The flaw is not listed in the CISA KEV catalog. Attackers can trigger the vulnerability from any internet\u2011accessible location, as authentication is not required; they only need to construct a POST request to the vulnerable AJAX endpoint and supply a malicious file. Successful exploitation would allow the attacker to execute arbitrary code on the host."}}}}, "created": "2026-03-23T09:45:18.731607+00:00", "updated": "2026-03-25T14:49:38.360112+00:00", "vendors": ["themerex", "themerex$PRODUCT$addons", "wordpress", "wordpress$PRODUCT$wordpress"]}