by Kastro
Paper/Archive/CVE-2026-115252

CVE-2026-115252

Unknown Confection WordPress Cable — Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option

CVSS 10.0
critical.is priorityof 100
30
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users to execute arbitrary PHP code on the server.

Affected

ProductAffectedFixed inSource
Confection WordPress Cable0.4.0 – 0.4.7–CNA

Scores by source

WPScan (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

exploitwpscan.com/vulnerability/aebe20c3-bc02-4082-bda8-bbaa01550925