CVE-2026-4375

9.0 Critique

Publiée le 07/07/2026 à 08:16 · Modifiée le 07/07/2026 à 16:16 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for example using a vulnerability where unclosed extensions from wordpress.org can be installed by unauthorized users.

Traduire en français

Produits concernés

Unknown DoLeads Integrator
Unknown wp2epub

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.0 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`

Références

https://wpscan.com/vulnerability/dd043e6c-e6c6-4c8d-aab0-5265d28f5cf6/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories