Critical · 10.0 CVE-2026-57700 EUVD-2026-39538GHSA-qxx8-x6c8-jhvr

WordPress OMGF Pro plugin <= 5.2.6 - Arbitrary File Upload vulnerability

Published Jun 25, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files.

This issue affects OMGF Pro: from n/a through 5.2.6.

Vendor	Product	Affected	Fixed
Daan.dev	OMGF Pro	≤ 5.2.6	—