Arbitrary File Upload Vulnerability in IT Residence Theme by Patchstack
CVE-2026-74014

9.9CRITICAL

Key Information:

Vendor

WordPress
Status
It Residence
Vendor
CVE Published:
20 August 2026

What is CVE-2026-74014?

The IT Residence theme versions up to 3.2.1 are susceptible to an arbitrary file upload vulnerability, allowing unauthorized users to upload malicious files to the server. This security risk could lead to further exploitation, including data breaches or complete server compromise. Proper sanitation and validation measures should be taken to prevent such unauthorized file uploads and safeguard your WordPress environment.

Affected Version(s)

IT Residence <= 3.2.1

References

https://patchstack.com/database/wordpress/theme/it-reside...
vdb-entry

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Denver Jackson | Patchstack Bug Bounty Program
.