Vulnerability in Ymc Filter
CVE-2026-16559
The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file con…
Affected products
- Unknown Ymc Filter — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)