CYBERHAWK / CVE / CVE-2026-1555

CVE-2026-1555

WebStack WordPress theme

CRITICAL CVSS 9.8 vibe

The flaw

Unauthenticated arbitrary file upload in io_img_upload() function

What to do

Update theme or remove if using version 1.2024 or earlier

▸ Scan my repo for CVE-2026-1555

References

First seen 2026-04-17 · Tracked by PickBits CyberHawk · Weekly CVE digest