Unrestricted File Upload Vulnerability in Kids Online Store by themagnifico52
CVE-2026-40750

9.9CRITICAL

Key Information:

Vendor

WordPress
Status
Kids Online Store
Vendor
CVE Published:
16 June 2026

What is CVE-2026-40750?

The Kids Online Store product by themagnifico52 is susceptible to an unrestricted file upload vulnerability, allowing an attacker to upload malicious files, such as web shells, to the server. This security flaw poses significant risks as it could enable unauthorized access and control over the web server. Affected versions range from n/a to 0.8.9, emphasizing the need for prompt updates and security measures.

Affected Version(s)

Kids Online Store <= 0.8.9

References

https://patchstack.com/database/wordpress/theme/kids-onli...
vdb-entry

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Denver Jackson | Patchstack Bug Bounty Program
.