CVE-2026-104028

Summary

The Anton Extensions WordPress plugin allows unauthenticated attackers to upload arbitrary PHP files to any location on the server due to missing capability checks, nonce verification, and file-type validation. This vulnerability leads to remote code execution and can be exploited by anyone with access to the plugin's upload endpoint.

Exploitability

Exploitation is straightforward with no prerequisites; attackers can directly upload malicious PHP files to arbitrary paths without authentication or additional setup.

Blast radius

The impact could be severe across all WordPress sites using the affected plugin version, potentially leading to full server compromise and data exfiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Anton Extensions plugin version 1.2.3 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.