A vulnerability classified as problematic was found in fishpie Image Uploader for Welcart Plugin up to 1.4.6 on WordPress. This issue affects some unknown processing. Such manipulation of the argument post_title leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-16080. The attack can be launched remotely. No exploit exists.