What you need to know today.
Multiple critical vulnerabilities disclosed today affect WordPress plugins, alongside critical flaws in Vanus Labs, BMC Helix, and others, enabling remote code execution and admin access.
Multiple WordPress plugins are affected by critical vulnerabilities, including deserialization flaws in Conversational Forms for ChatBot (CVE-2026-110886) and LearnPress (CVE-2026-104736), allowing for object injection. OttoKit (CVE-2026-110372) and Booktics (CVE-2026-109894) suffer from privilege escalation and SQL injection, respectively. The Email Verification plugin also has an authentication bypass vulnerability (CVE-2025-12374). These issues, with CVSS scores of 9.8, pose a significant risk to WordPress sites, as noted by Vypr Intelligence.
Vanus Labs' Vanus 0.8.0 through 0.9.0 has a critical default credentials vulnerability (CVE-2026-111998) allowing unauthenticated remote attackers to gain cluster-admin access using a hardcoded admin token. This allows attackers to bypass authentication and gain full control over the cluster.
Wukong_HRM through commit 186115e contains an authentication bypass vulnerability (CVE-2026-108707) in ParamAspect. Unauthenticated attackers can call any HRM API endpoint by omitting the AUTH-TOKEN header, granting them HR administrator access and enabling unauthorized data manipulation.
BMC Helix Network Management on-prem before 26.3.01 has a critical authentication bypass vulnerability (CVE-2026-111283) when SAML single sign-on is configured. This allows unauthenticated attackers to log in as the local administrator with any password, posing a severe risk to network management security.
Remote Keyboard Desktop 1.0.1 has a critical vulnerability (CVE-2025-66576) enabling remote attackers to execute system commands via the rundll32.exe exported function. This allows for unauthenticated remote code execution, giving attackers significant control over affected systems.
Nagios XI versions prior to 2012R1.3 contain a critical SQL injection vulnerability (CVE-2012-10063) in the legacy Core Configuration Manager (CCM) interface. Authenticated users can manipulate SQL queries by supplying crafted input to specific CCM parameters, potentially leading to unauthorized data access or modification.