CVE-2026-86717

Kritik

Teknik Veri (Otomatik)

CVSS Skoru: 9.1
EPSS: 0.3%
CWE: CWE-862
KEV Durumu: Hayır

Yayım tarihi: 11 Ekim 2026

The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.

Referanslar

https://wpscan.com/vulnerability/598c7ff4-d6cb-4b4b-a8cd-83f019d10350/

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.