As cited
Copy frozen at (site build).
vulnerabilities
Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server
Wordfence Argus discovered a critical heap buffer overflow in Ghostscript versions 9.21 through 10.07.1 that allows unauthenticated remote code execution when processing specially crafted PDFs containing JPEG 2000 images. Artifex released Ghostscript 10.08.0 on September 8, 2026, to fix CVE-2026-39919, which affects any application that converts untrusted PDFs to images, including WordPress sites using the ImageMagick and Imagick extensions. Wordfence demonstrated working proof-of-concept exploits against purpose-built test environments, though build-specific variations limit universal exploitation across different system configurations.
Why it matters: WordPress site owners and administrators of any service processing untrusted PDFs (document management systems, mail gateways, conversion APIs) must urgently update Ghostscript packages, as the vulnerability enables unauthenticated code execution; verify the full package revision with system commands rather than relying on version output, and rebuild containerized deployments from updated base images.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server
Wordfence Argus discovered a critical heap buffer overflow in Ghostscript versions 9.21 through 10.07.1 that allows unauthenticated remote code execution when processing specially crafted PDFs containing JPEG 2000 images. Artifex released Ghostscript 10.08.0 on September 8, 2026, to fix CVE-2026-39919, which affects any application that converts untrusted PDFs to images, including WordPress sites using the ImageMagick and Imagick extensions. Wordfence demonstrated working proof-of-concept exploits against purpose-built test environments, though build-specific variations limit universal exploitation across different system configurations.
Why it matters: WordPress site owners and administrators of any service processing untrusted PDFs (document management systems, mail gateways, conversion APIs) must urgently update Ghostscript packages, as the vulnerability enables unauthenticated code execution; verify the full package revision with system commands rather than relying on version output, and rebuild containerized deployments from updated base images.
- Source published
- First seen by Cybersecurity Tracker