{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-124833", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2026-11-09T13:52:06.074Z", "datePublished": "2026-11-13T06:00:09.349Z", "dateUpdated": "2026-11-13T06:00:09.349Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-11-13T06:00:09.349Z"}, "title": "Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Upload", "problemTypes": [{"descriptions": [{"description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Ahime Image Printer", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "1.0.0"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server."}], "references": [{"url": "https://wpscan.com/vulnerability/3b24b6d4-061c-4229-9ced-c2306eee44ea/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Khaled Alenazi (Nxploited)", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Ahime Image Printer", "vendor": "Unknown", "versions": [{"lessThanOrEqual": "1.0.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "contact@wpscan.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server."}], "id": "CVE-2026-124833", "lastModified": "2026-11-13T06:16:54.057", "metrics": {}, "published": "2026-11-13T06:16:54.057", "references": [{"source": "contact@wpscan.com", "url": "https://wpscan.com/vulnerability/3b24b6d4-061c-4229-9ced-c2306eee44ea/"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Received"}

{}

{}