CVE-2026-74014: WordPress IT Residence theme <= 3.2.1 - Arbitrary File Upload vulnerability
Published Aug 20, 2026
·Updated
Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions.
Affected Software
1 affected component
WordPress IT Residence theme<=3.2.1
Event History
Aug 20, 2026
CVE Published
via MITRE·12:07 PM
Data Sourced
via MITRE·12:07 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker needs a Subscriber-level account. The issue can be exploited remotely without user interaction once that level of access is available.
2
What is the likely impact of successful exploitation?
Successful exploitation allows arbitrary file upload. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability, including impacts beyond the vulnerable component.
3
Which installations are affected?
IT Residence theme versions 3.2.1 and earlier are affected. The provided information does not state whether a particular configuration or feature must be enabled.