CVE WATCH / VULNERABILITY DETAIL
CVE-2026-111311
HIGHCVSS 8.8NVD feed
Published 16 October 2026 · tracked since 17 October 2026
Description
The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-l
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-63618 HIGH 7.5
- CVE-2026-111391 HIGH 8.1
- CVE-2026-92766 HIGH 7.5
- CVE-2026-75903 HIGH 8.1
- CVE-2026-92553 HIGH 8.8
- CVE-2026-97296 HIGH 8.1
- CVE-2026-92115 HIGH 8.8
- CVE-2026-110015 HIGH 8.8
- CVE-2026-110135 HIGH 7.4
- CVE-2026-104730 CRITICAL 9.8