CVE of the day — CVE-2026-118423 (CVSS 10,0, critical)?Procedurally generated video from real data from official public sources. Backgrounds are abstract AI-generated images and the narration is a synthetic voice (TTS). No real event is filmed or altered.

CVE-2026-118423: Critical gravity, CVSS score 10,0 out of 10 according to the National Vulnerability Database.

The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its forms submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and them execute..

Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.