TI-2018-15560 CVE-2018-25335 · GHSA-gvq2-4mf3-84fhWordPress Plugin Peugeot Music 1.0 Arbitrary File UploadPriority MEDIUM 49WordPress Plugin Peugeot Music 1.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the upload.php endpoint.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00515 · Published 2026-05-17 · No fix listed CWE-306