CVE-2026-42748: Arbitrary File Upload in WPify Woo Plugin (CVSS 8.8)

CVE-2026-42748 is a CVSS 8.8 Arbitrary File Upload flaw in WPify Woo <= 5.4.1 letting Contributors upload PHP shells and potentially execute remote code.