WordPress Plugin Vulnerabilities

Squeeze < 1.7.12 - Author+ Arbitrary File Upload

Description

The plugin does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the upload_files capability (Author and above) to write an executable PHP file into the uploads directory and achieve remote code execution.

Proof of Concept

Affects Plugins

Plugin icon
squeeze
Fixed in 1.7.12

References

CVE
CVE-2026-16985

Miscellaneous

Original Researcher
Ezekiel Victor
Submitter
Ezekiel Victor
Verified
Yes
WPVDB ID
045a15f3-5750-4c4e-977d-e1283e3c967d

Timeline

Publicly Published
2026-08-06 (about 4 days ago)
Added
2026-08-06 (about 3 days ago)
Last Updated
2026-08-06 (about 3 days ago)

Other

Published
Title
Published
2025-04-16
Title
Kadence WooCommerce Email Designer < 1.5.15 - Admin+ Arbitrary File Upload
Published
2024-11-22
Title
School Management < 92.0.0 - Authenticated (Student+) Arbitrary File Upload
Published
2025-04-03
Title
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Published
2019-06-06
Title
Crelly Slider <= 1.3.4 - Arbitrary File Upload
Published
2021-09-01
Title
Secure File Manager <= 2.9.3 - Admin+ RCE