Skip to content

CVE-2026-6518

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
April 19, 2026
Last Seen
April 19, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in WordPress Plugin CVE-2026-651871.0

The CMP – Coming Soon & Maintenance Plugin by NiteoThemes for WordPress has a critical vulnerability (CVE-2026-6518) affecting all versions up to 4.1.16. This vulnerability allows authenticated users with Administrator privileges to exploit the `cmp_theme_update_install` AJAX action, which improperl...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-434 - Unrestricted Upload Of File With Dangerous TypeCWE-862 - Missing AuthorizationT1190 - Exploit Public-Facing ApplicationWordPress