/Vulnerability Library

WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload

CVE-2026-1306
Verified

Description

WordPress midi-Synth plugin \u003C= 1.1.0 contains an unrestricted file upload vulnerability caused by missing file type and extension validation in the 'export' AJAX action, letting unauthenticated attackers upload arbitrary files and potentially execute remote code, exploit requires attacker to obtain a valid nonce exposed in frontend JavaScript.

Severity

Critical

CVSS Score

9.8

Exploit Probability

5%

Affected Product

midi-synth

Published Date

March 23, 2026

Template Author

pussycat0x

CVE-2026-1306.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2026-1306
CWE ID:
cwe-434

References

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/midi-synth/midi-synth-110-unauthenticated-arbitrary-file-upload-via-export-ajax-action

Remediation Steps

Update to the latest version of midi-Synth plugin.