Skip to content
OpenAdvisories

Vendor

seezee

2 known vulnerabilities.

Products

WP FOFT Loader 1 Five-Star Ratings Shortcode 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-1756

    WP FOFT Loader <= 2.1.39 - Authenticated (Author+) Arbitrary File Upload

    The WP FOFT Loader plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WP_FOFT_Loader_Mimes::file_and_ext' function in all versions up to, and including, 2.1.39. This makes it possible for authenticated a…

    seezee WP FOFT Loader Web / CMS