PT-2026-110038 · WordPress · Insurify
CVE-2026-85121
·
Published
2026-10-11
·
Updated
2026-10-11
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Insurify WordPress plugin version 1.0
Description
An issue exists where an AJAX action lacks authorization and nonce checks. This allows unauthenticated users to create or overwrite arbitrary WordPress options using request data, which can result in the site being taken offline or the deactivation of the plugin.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Insurify