CRITICAL
Private Feed Key
CVE published 2026-09-17
CVE-2026-86707
CVE-2026-86707 is a critical vulnerability in the Private Feed Key WordPress plugin, version 0.1, that allows unauthenticated attackers to log in as any user, including administrators. This vulnerability is particularly concerning due to its potential for unauthenticated administrator login, which could lead to significant lateral movement within the WordPress environment. Defenders should prioritize veri [truncated]