kemu retweeted
🚨 PoC released: CVE-2026-116512 (CVSS 9.8), unauthenticated RCE in the Project Manager #WordPress plugin (<= 4.1.1).
Unsanitized 'id' param reaches a PHP function call. No login needed.
Update to 4.1.2.
PoC: github.com/babymushr00w/cve-…
exploitgrid.net
#CyberSecurity


















