Skip to content

CVE-2026-115252 Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option

CriticalCVSS 10.0
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users to execute arbitrary PHP code on the server.

Affected products

No affected product data has been published yet.

References

  • wpscan.com exploit technical-description vdb-entry