CVE-2026-124833

{
  "etk_id": "ETK-2026-4354",
  "cve_id": "CVE-2026-124833",
  "display_id": "CVE-2026-124833",
  "ghsa_id": "GHSA-cphg-5225-v7hq",
  "euvd_id": "EUVD-2026-124851",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated arbitrary file upload in Ahime Image Printer",
  "summary": "Ahime Image Printer for WordPress through version 1.0.0 does not adequately validate uploaded files. An unauthenticated attacker may upload arbitrary files and achieve code execution on the server where uploaded content can be executed. Exploitation requires the plugin's upload functionality to be reachable by the attacker.",
  "mitigation": "Disable and remove Ahime Image Printer from affected WordPress sites until a vendor-fixed release is available. Restrict public access to its upload functionality and ensure uploaded files cannot be executed by the web server.",
  "vendor": null,
  "product": "Ahime Image Printer",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 1.0.0"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Ahime Image Printer",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 27.241075666666667,
  "t0_at": "2026-11-13T06:00:09.349000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-13T06:00:09.349000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-13T06:00:09.349000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-124833"
    }
  }
}