Description
WordPress WebStack主题是一款用于构建导航网站的WordPress主题，提供可视化拖拽式页面构建器、丰富的挂件模块、响应式设计等特性，支持多语言和SEO优化，适用于搭建个人或企业导航网站。WordPress WebStack主题 /wp-admin/admin-ajax.php 接口存在文件上传漏洞，攻击者可上传恶意文件获取服务器控制权。
WordPress WebStack主题 /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2026-1555）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2026-1555
https://www.cve.org/CVERecord?id=CVE-2026-1555
https://www.sentinelone.com/vulnerability-database/cve-2026-1555/
https://blog.kejilion.pro/webstack-theme-vulnerability-rce-review/
https://vulnso.com/products/wordpress-webstack-%E4%B8%BB%E9%A2%98
https://github.com/Nxploited/CVE-2026-1555
https://freshysites.com/security-bulletins/webstack-theme-vulnerability-cve-2026-1555/
https://mondoo.com/vulnerability-intelligence/vulnerability/CVE-2026-1555
https://www.codeant.ai/vulnerability-database/cve-2026-1555