CVE-2026-115252: from 0.4 Authentication Bypass - Analysis & Fix TheHackerWire / 4h Real-time tracking of CVSS 9.0+ remote execution zero-days, public exploit code, and ransomware-linked vulnerabilities disclosed this week. Security teams should monitor threat feeds for emerging developments and apply vendor patches proactively.

The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users to execute arbitrary PHP code on the server.

Official Advisories & References

Community & Discussion

Critical Vulnerabilities — Last 7 Days

Real-time tracking of CVSS 9.0+ remote execution zero-days, public exploit code, and ransomware-linked vulnerabilities disclosed this week.

Frequently Asked Questions

CVE-2026-115252 is a Critical severity security vulnerability. The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one...

This vulnerability has a CVSS score of 10 out of 10, rated as Critical. Critical vulnerabilities can be exploited remotely without authentication and may lead to full system compromise, data theft, or malware installation.

To protect against CVE-2026-115252, you should: (1) Apply the latest security patches from the vendor, (2) Check official security advisories for specific remediation steps, (3) Update affected software to the latest version, and (4) Monitor your systems for any signs of exploitation.

This vulnerability was publicly disclosed on November 9, 2026. Organizations should check if they were vulnerable during the period before the patch was available.

No public exploit code has been confirmed for CVE-2026-115252 at this time. Security teams should monitor threat feeds for emerging developments and apply vendor patches proactively.

Currently, CVE-2026-115252 is not recorded in the CISA Known Exploited Vulnerabilities (KEV) catalog as being actively exploited in the wild. Security teams should still patch proactively to prevent zero-day targeting.

⚡ Security Analysis & Testing Tools