CYBERHAWK / CVE / CVE-2026-5294

CVE-2026-5294

WordPress Geeky Bot

CRITICAL CVSS 9.8 vibe

The flaw

Missing authorization allows arbitrary plugin installation and RCE.

What to do

Update plugin beyond v1.2.2

▸ Scan my repo for CVE-2026-5294

References

NVD CISA KEV OSV GitHub Advisory MITRE News search
First seen 2026-05-08 · Tracked by PickBits CyberHawk · Weekly CVE digest
← All CVEs RSS Scheduled audits