Skip to main content

Sploitus

Home
CVE-2026-32559
cve

Exploit for CVE-2026-32559

cve · 2026-08-24

Description

Subscriber arbitrary file upload in UltimateAI up to 3.1.0.

CVSS 9.9 for CVE-2026-32559

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

0.4%higher than 29.2% of all CVEs

Updated 2026-09-02

CVE Information

References

https://patchstack.com/database/wordpress/plugin/ultimate_ai/vulnerability/wordpress-ultimateai-plugin-3-1-0-arbitrary-file-upload-vulnerability?_s_id=cve

Exploit Details

Modified:2026-08-27 17:17

Last Seen:2026-08-27 17:26

Reporter:Patchstack

Tags

UltimateAIarbitrary file uploadsubscriber roleversion 3.1.0

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-32559
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.

Share

Share this link:

Share on social media:

API•X•RSS•Atom

powered by

All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.