WordPress Plugin Vulnerabilities

DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload

Description

The plugin does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code execution.

Proof of Concept

Affects Plugins

Plugin icon
ds-adrotator
No known fix

References

CVE
CVE-2026-81402

Miscellaneous

Original Researcher
Huynh Kien Minh
Submitter
Huynh Kien Minh
Verified
Yes
WPVDB ID
60e82611-ddf1-4275-8c68-14694d863fca

Timeline

Publicly Published
2026-09-10 (about 2 days ago)
Added
2026-09-10 (about 1 day ago)
Last Updated
2026-09-10 (about 1 day ago)

Other

Published
Title
Published
2024-09-30
Title
Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload
Published
2024-04-05
Title
Import XML and RSS Feeds < 2.1.6 - Authenticated (Administrator+) Arbitrary File Upload
Published
2021-04-20
Title
Kaswara Modern VC Addons (0-day) - Unauthenticated Arbitrary File Upload
Published
2024-10-24
Title
aDirectory < 1.3.1 - Unauthenticated Arbitrary File Upload
Published
2024-01-09
Title
AI Engine: ChatGPT Chatbot < 1.9.99 - Unauthenticated Arbitrary File Upload