WordPress security by component
Warehouse Cargo
Warehouse Cargo (warehouse-cargo) is a WordPress theme with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 20, 2026; the highest published CVSS base score is 9.9.
Theme slug:
warehouse-cargoLatest vulnerability
CVE-2026-74018: Warehouse Cargo permits Subscriber-level arbitrary file upload
Warehouse Cargo <= 2.6.9 allows a Subscriber to upload an arbitrary file. Executable content could produce code execution where the undisclosed upload path and server configuration permit it; otherwise the primitive still places attacker-controlled content on the server.
| Safe version |
|
||
|---|---|---|---|
| Aug 20, 2026 |
CVE-2026-74018
Warehouse Cargo permits Subscriber-level arbitrary file upload
Warehouse Cargo <= 2.6.9 allows a Subscriber to upload an arbitrary file. Executable content could produce code execution where the undisclosed upload path and server configuration permit it; otherwise the primitive still places attacker-controlled content on the server.
|
See mitigation notes |
CVE9.9
NVDPending
|