Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

WordPress Plugin File Upload Vulnerability Allows Unauthenticated Access

MINI-m5q6-m5x7-7p28
Summary

The WordPress plugin 'Mini' has a security flaw that allows attackers to upload malicious files without proper authorization. This could lead to unauthorized access to sensitive data or harmful actions on the website. Update the plugin to the latest version to prevent this issue.

What to do
  • Update apicurio-registry to version 3.2.1-r0.
  • Update apicurio-registry-compat to version 3.2.1-r0.
  • Update apicurio-registry-ui to version 3.2.1-r0.
  • Update apicurio-registry-nginx-config to version 3.2.1-r0.
Affected software
Ecosystem VendorProductAffected versions
MinimOS apicurio-registry < 3.2.1-r0
Fix: upgrade to 3.2.1-r0
MinimOS apicurio-registry-compat < 3.2.1-r0
Fix: upgrade to 3.2.1-r0
MinimOS apicurio-registry-ui < 3.2.1-r0
Fix: upgrade to 3.2.1-r0
MinimOS apicurio-registry-nginx-config < 3.2.1-r0
Fix: upgrade to 3.2.1-r0
Original title
MINI-m5q6-m5x7-7p28
Published: 14 Apr 2026 · Updated: 14 Apr 2026 · First seen: 14 Apr 2026