Read the docs

peugeot-music-plugin

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

peugeot-music-plugin records in CISA KEV

No peugeot-music-plugin vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 49

WordPress Plugin Peugeot Music 1.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the upload.php endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00515 Published 2026-05-17 No fix listed CWE-306
Open these records in search →