Veille CVE

Recherche « Unknown InfiniteWP Client »

1 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown InfiniteWP Client » ✕
  1. CVE-2026-15038 9.8 Critique

    Unknown InfiniteWP Client

    The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPress Multisite installations, allowing unauthenticated attackers to bind their own key, hijack an administrator session, and take over the entire network, leading to remote code execution.