CVE-2026-1306

The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible granted the attacker can obtain a valid nonce. The nonce is exposed in frontend JavaScript making it trivially accessible to unauthenticated attackers.

• CWE-434

• https://plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynth.php#L110
• https://plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynth.php#L121
• https://plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynthConvert.php#L421
• https://plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynthConvert.php#L492
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3460788%40midi-synth&new=3460788%40midi-synth&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/d5b695d7-c690-4748-b218-5699d1aa63bf?source=cve

Published

Feb 14, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-13054A path traversal vulnerability in the WatchGuard Fireware OS…7.2
• CVE-2026-13055The `$_internalIndexKey` aggregation expression can be used …7.1
• CVE-2026-13056Using expressions that generate large arrays it is possible …7.1
• CVE-2026-13057An issue in the server’s Atlas Search integration allows an …6.5
• CVE-2026-13058An authenticated user with basic write privileges can cause …6.5
• CVE-2026-13059An authenticated user with low privileges may be able to per…8.6
• CVE-2026-13060An authenticated user with limited read privileges may be ab…7.1
• CVE-2026-13061An authenticated user may be able to view session metadata b…5.3
• CVE-2026-13062An authenticated user with write privileges on a Queryable E…7.1
• CVE-2026-13063An authenticated user with standard read/write privileges ca…5.3
• CVE-2026-13064Certain query operations involving deeply nested $jsonSchema…7.1
• CVE-2026-13065A user with read-only privileges is able to craft an aggrega…7.1