Skip to content

CVE-2026-92966

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
October 1, 2026
Last Seen
October 1, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerabilities Disclosed in Popular WordPress Plugins70.5

Multiple critical vulnerabilities have been disclosed affecting popular WordPress plugins, including SiteSkite and LatePoint. CVE-2026-96349 and CVE-2026-92966 both allow unauthenticated remote code execution, with CVSS scores of 10.0 and 9.1 respectively. The SiteSkite plugin flaw allows attackers...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

CVE-2026-102425CWE-94 - Code InjectionT1059 - Command and Scripting InterpreterWordPress