CVE-2026-86717

Name of the Vulnerable Software and Affected Versions Insurify WordPress plugin version 1.0

Description An issue exists where an AJAX action lacks authorization and nonce checks. This allows unauthenticated users to delete arbitrary WordPress options, which can result in the website being taken offline and the removal of roles from all users. A nonce is a unique token used to protect against cross-site request forgery.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.