CVE-2026-1756 | WP FOFT Loader Plugin up to 2.1.39 on WordPress file_and_ext unrestricted upload

A vulnerability identified as critical has been detected in WP FOFT Loader Plugin up to 2.1.39 on WordPress. Affected by this vulnerability is the function WP_FOFT_Loader_Mimes::file_and_ext. Performing a manipulation results in unrestricted upload.

This vulnerability is reported as CVE-2026-1756. The attack is possible to be carried out remotely. No exploit exists.