Skip to content

CVE-2026-16502

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 8, 2026
Last Seen
September 8, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CVEs Disclosed for WordPress Plugins: CVE-2026-16502 and CVE-2026-643157.1

Two significant vulnerabilities affecting WordPress plugins have been disclosed. CVE-2026-16502 in the Live Composer plugin allows authenticated attackers to exploit PHP Object Injection, potentially leading to code execution if a compatible gadget chain is present. CVE-2026-6431 in the User Profile...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-502 - Deserialization Of Untrusted DataWordPressPHP Object Injection