{"vulnerability": "CVE-2026-3717", "sightings": [{"uuid": "442be56b-00e8-45de-957d-5b2284cf1afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3717", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415356116064115", "content": "CVE-2026-3717 CV Builder \u2013 Professional Resume Builder SaaS <= 1.3.1 - Missing Authorization to Unauthenticated PNG File Upload The CV Builder \u2013 Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wp_save_signature_image' function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to upload arbitrary content to the WordPress uploads directory as png files.\nhttps://www.cve.org/CVERecord?id=CVE-2026-3717https://www.wordfence.com/threat-intel/vulnerabilities/id/b7384260-96cd-4451-84ec-ce0fb7d38a9f?source=cvehttps://plugins.trac.wordpress.org/changeset/3480946/cv-builder#wordpress #bestwpdeveloper #WPCVBuilder#CVE_2026_3717#bot", "creation_timestamp": "2026-10-10T07:09:12.299897Z"}]}