Skip to content

CVE-2026-15667

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 11, 2026
Last Seen
September 11, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two critical vulnerabilities affecting WordPress plugins have been disclosed. CVE-2026-77770 affects the miniOrange 2FA plugin, allowing unauthenticated arbitrary option deletion, while CVE-2026-15667 impacts the Eventin plugin, enabling authenticated local file inclusion. Both vulnerabilities pose...

Public Exploits

Checking GitHub for proof-of-concept code…