{
  "url": "https://www.videodioggi.com/cve-2026-10-16-en.html",
  "title": "CVE of the day — CVE-2026-107594 (CVSS 10,0, critical)",
  "language": "en",
  "published": "2026-10-16T01:06:32.951Z",
  "modified": "2026-10-16T01:06:32.951Z",
  "summary": "CVE-2026-107594: critical vulnerability, CVSS 10,0/10, type CWE-73, exploitable remotely, without privileges, without user interaction. The File Upload to Order WordPress plugin before 1.1.4 does not validate or boundary file path taken from attacker-controlled session date before deleting the file..",
  "keywords": [
    "c",
    "cve-2026-107594",
    "vulnerability",
    "critical vulnerability",
    "cwe-73",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "key_facts": [
    "CVE-2026-107594 — CVE-2026-107594: Critical gravity, CVSS score 10,0 out of 10 according to the National Vulnerability Database.",
    "CWE-73 — The File Upload to Order WordPress plugin before 1.1.4 does not validate or boundary file path taken from attacker-controlled session date before deleting the file, and the action that performs the deletion is..",
    "Exposure and mitigation — Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
  ],
  "transcript": "CVE-2026-107594: Critical gravity, CVSS score 10,0 out of 10 according to the National Vulnerability Database. The File Upload to Order WordPress plugin before 1.1.4 does not validate or boundary file path taken from attacker-controlled session date before deleting the file, and the action that performs the deletion is.. Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "video": {
    "mp4": "https://www.videodioggi.com/videos/cve-2026-10-16-en.mp4",
    "poster": "https://www.videodioggi.com/videos/cve-2026-10-16-en.jpg",
    "duration_seconds": 20
  },
  "source": "www.videodioggi.com",
  "generator": "videodioggi procedural video engine"
}