Security
Loading…

CVE-2026-86717

CRITICALCVSS 9.1
View on NVD← Back to search
Description

The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.

Timeline
Published:October 11th, 2026 7:17 AM
Last modified:October 11th, 2026 12:17 PM
CVSS Scoring

CVSS v3: 9.1 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)
CWE-862
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute