#NØØT_Security_Alerts 🚨 #ALERT — CRITICAL WORDPRESS ANTON EXTENSIONS FLAW ALLOWS UNAUTHENTICATED REMOTE CODE EXECUTION October 11, 2026 DISCLOSED BY: WPScan PRODUCT: Anton Extensions — WordPress Plugin CVE: CVE-2026-104028 SEVERITY: Critical — CVSS 9.8 AFFECTED VERSIONS: 1.2.2 and earlier. IMPACT: Unauthenticated remote attackers can upload arbitrary PHP files to attacker-controlled filesystem paths. Missing permission checks, nonce verification, and file-type validation allow malicious PHP uploads that can lead to server-side code execution. EXPLOITATION STATUS: CONFIRMED VULNERABILITY. No verified in-the-wild exploitation or public working PoC identified. Forensic triage: Inspect unexpected PHP files, suspicious upload requests, unauthorized filesystem modifications, and unusual web-server processes. Review recent access logs for anomalous requests involving plugin upload functionality. No confirmed CVE-specific malicious IOCs have been published. URGENT ACTION: Disable or remove vulnerable Anton Extensions installations until a verified security fix is available. Restrict file-upload capabilities and prevent PHP execution in upload directories. Investigate suspicious server activity. SOURCE: https://wpscan.com/vulnerability/0be8a03e-d854-48db-bdc0-1beead3d7b91/ CONFIDENCE: HIGH — WPScan CNA disclosure documents the vulnerability, affected versions, and attack mechanism. Real-world exploitation remains unverified. #CyberSecurity #ThreatIntel #WordPress #RCE #FileUpload #WebSecurity