CVE-2026-32444

CriticalCVSS 9.9

Published: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

A user with the Contributor role can remotely execute code (RCE) in Cwicly versions up to 1.4.4.

Full compromise of the WordPress site, data theft, or malware installation.

Update the Cwicly plugin to a version newer than 1.4.4.

Original NVD description (English source)

Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.