Directory Traversal Vulnerability in HUSKY WordPress Plugin
CVE-2026-15244
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-15244?
The HUSKY WordPress plugin, prior to version 1.4.1, contains a vulnerability that fails to properly sanitize a stored setting value, enabling directory traversal. This flaw allows users with shop manager capabilities to manipulate file inclusion paths, leading to the potential execution of arbitrary local files. This vulnerability can be exploited with every front-end request, affecting both authenticated and unauthenticated users, which poses a significant risk to website security.
Affected Version(s)
HUSKY 0 < 1.4.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.