Mehul Gohil CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Mehul Gohil CVE published 2026-10-02

CVE-2026-39600

A vulnerability in the WordPress Aculect AI Companion plugin allows for Unvalidated Redirects and Forwards, potentially enabling phishing attacks. This issue affects Aculect AI Companion versions up to and including 0.8.2. The vulnerability could allow attackers to redirect users to malicious sites, leading to potential phishing attacks. WordPress administrators and users of the Aculect AI Companion plugi [truncated]