file-upload

• CVE-2026-45034 - PHPSpreadsheet PHAR wrapper patch bypass 2026-06-11
• CVE-2026-4882 - WordPress User Registration Advanced Fields upload RCE 2026-05-02