← All advisories

Critical severity9.8NVD Advisory· Published Aug 19, 2026

CVE-2026-73389

CVE-2026-73389

Description

Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Kalles Addonsllm-create
Range: <=1.0.6

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/kalles-addons/vulnerability/wordpress-kalles-addons-plugin-1-0-6-php-object-injection-vulnerabilitynvd

News mentions

1

WordPress Plugins: 25 Vulnerabilities Disclosed, Including Critical Unauthenticated Flaws
Vypr Intelligence · Aug 19, 2026