CVE-2026-76552

By NVD Recent CVEs1 min readPublished 16 September 2026

https://nvd.nist.gov/vuln/detail/CVE-2026-76552

External Source means this preview stays on Qubicweb while the full article lives on the publisher site.

Brief points

Key points will appear here after this read is condensed for Qubicweb. Use the source link below if you need the full article immediately.

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate the type, extension or content of files it retrieves from a user-supplied URL during import, allowing users granted its import permission to store arbitrary files, including executable ones, on the server and achieve remote code execution....

This is a preview.