WordPress security by component
IT Residence
IT Residence (it-residence) is a WordPress theme with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 20, 2026; the highest published CVSS base score is 9.9.
Theme slug:
it-residenceLatest vulnerability
CVE-2026-74014: IT Residence permits Subscriber-level arbitrary file upload
IT Residence <= 3.2.1 allows a Subscriber to upload an arbitrary file. Executable content could produce code execution where the undisclosed upload path and server configuration permit it; otherwise the primitive still places attacker-controlled content on the server.
| Safe version |
|
||
|---|---|---|---|
| Aug 20, 2026 |
CVE-2026-74014
IT Residence permits Subscriber-level arbitrary file upload
IT Residence <= 3.2.1 allows a Subscriber to upload an arbitrary file. Executable content could produce code execution where the undisclosed upload path and server configuration permit it; otherwise the primitive still places attacker-controlled content on the server.
|
See mitigation notes |
CVE9.9
NVDPending
|