CVE-2026-1492 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
March 5, 2026
Last Seen
April 13, 2026

CVE-2026-1492 is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 5 intelligence report mentions.

CVE-2026-1492 is a vulnerability tracked across 2 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed March 5, 2026; most recent activity April 13, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Critical WordPress Plugin Flaw Lets Attackers Bypass Authentication and Gain Admin Access — Cybersecuritynews · April 13, 2026
  • WordPress Plugin Vulnerability Enables Admin Takeover via Auth Bypass — Gbhackers · April 13, 2026
  • WordPress Membership Plugin Vulnerability Let Attackers Create Admin Accounts — Cybersecuritynews · March 6, 2026
  • WordPress Membership Plugin Flaw Lets Attackers Create Admin Accounts — Gbhackers · March 6, 2026
  • WordPress membership plugin bug exploited to create admin accounts — Bleepingcomputer · March 5, 2026

Related Entities

Data Breach Malware Phishing Zero-day Exploit CVE-2026-23550 T1068 - Exploitation for Privilege Escalation T1071 - Application Layer Protocol T1136 - Create Account T1190 - Exploit Public-Facing Application WordPress

Frequently asked questions

What is CVE-2026-1492?

CVE-2026-1492 is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 5 intelligence report mentions.

Is CVE-2026-1492 still active?

The most recent intelligence report mentioning CVE-2026-1492 on ThreatCluster is dated April 13, 2026. Activity was first observed March 5, 2026, giving a tracked span from then to April 13, 2026.

What is CVE-2026-1492 associated with?

Across ThreatCluster reporting, CVE-2026-1492 most frequently co-occurs with Data Breach, Malware, Phishing, Zero-day Exploit, CVE-2026-23550, among 10 tracked related entities.

What are the latest developments involving CVE-2026-1492?

The most significant recent cluster is “Critical CVE-2026-1492 Vulnerability in WordPress Plugin Allows Admin Takeover” (2 articles · Updated April 13, 2026). CVE-2026-1492 appears across 2 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2026-1492?

CVE-2026-1492 appears in 5 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown