CVE Catalog
CVE-2026-59543
CriticalCVSS 9.9Summary
The Advanced Views plugin versions up to 3.8.11 allow a subscriber to perform remote code execution (RCE).
Risk Assessment
A user with the subscriber role can execute arbitrary code on the server, potentially leading to full site compromise.
Recommendation
It is recommended to update the Advanced Views plugin to a version later than 3.8.11.
Original NVD description (English source)
Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.