Unauthenticated Arbitrary File Upload in Tailored Tools by Tailored Tools
CVE-2026-62025

9CRITICAL

Key Information:

Vendor

WordPress
Status
Tailored Tools
Vendor
CVE Published:
10 October 2026

What is CVE-2026-62025?

Tailored Tools versions up to 3.0.3 are vulnerable to an unauthenticated arbitrary file upload issue, allowing attackers to upload malicious files without authentication. This vulnerability poses significant risks as it can be exploited to execute arbitrary code on the server, leading to potential data breaches and unauthorized access. Website administrators should take immediate action to update to the latest version to mitigate this risk and protect their systems.

Affected Version(s)

Tailored Tools <= 3.0.3

References

https://patchstack.com/database/wordpress/plugin/tailored...
vdb-entry

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

V1T | Patchstack Bug Bounty Program
.