WordPress security by component
Smart Cleaning
Smart Cleaning (smart-cleaning) is a WordPress theme with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 20, 2026; the highest published CVSS base score is 9.9.
Theme slug:
smart-cleaningLatest vulnerability
CVE-2026-74016: Smart Cleaning permits Subscriber-level arbitrary file upload
Smart Cleaning <= 4.8.6 allows a Subscriber to upload an arbitrary file. Executable content could produce code execution where the undisclosed upload path and server configuration permit it; otherwise the primitive still places attacker-controlled content on the server.
| Safe version |
|
||
|---|---|---|---|
| Aug 20, 2026 |
CVE-2026-74016
Smart Cleaning permits Subscriber-level arbitrary file upload
Smart Cleaning <= 4.8.6 allows a Subscriber to upload an arbitrary file. Executable content could produce code execution where the undisclosed upload path and server configuration permit it; otherwise the primitive still places attacker-controlled content on the server.
|
See mitigation notes |
CVE9.9
NVDPending
|