CYBERHAWK / CVE / CVE-2026-4882

CVE-2026-4882

WordPress User Registration Advanced Fields

CRITICAL CVSS 9.8 vibe

The flaw

Arbitrary file upload vulnerability allows unauthenticated remote code execution.

What to do

Update plugin beyond v1.6.20

▸ Scan my repo for CVE-2026-4882

References

First seen 2026-05-08 · Tracked by PickBits CyberHawk · Weekly CVE digest