CVE-2026-57710

CriticalCVSS 9.9

Published: 13/07/2026(UTC)Updated: 13/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

38th percentile - higher than 38% of all known CVEs

Summary

The WoowBot Pro Max WordPress plugin contains an unrestricted file upload vulnerability allowing dangerous file types. This enables an attacker to upload malicious files, potentially leading to remote code execution.

Risk Assessment

The organization is at risk of server compromise through the upload and execution of a malicious file, which could result in data loss, system integrity breach, and further attacks.

Recommendation

Immediately update the WoowBot Pro Max plugin to a version newer than 14.1.7 if available, or temporarily disable the plugin until a patch is released.

Original NVD description (English source)

Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbot-pro-max allows Using Malicious Files.This issue affects WoowBot Pro Max: from n/a through <= 14.1.7.