adminkov

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

adminkov records in CISA KEV

No adminkov vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-01021 CVE-2026-1306 · GHSA-6m5f-57jg-w742

midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload via 'export' AJAX Action

MEDIUM 57

The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04827 Published 2026-02-14 No fix listed CWE-434

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0