CVE-2026-49113

WordPress Cornerstone plugin < 7.8.8 - Arbitrary Code Execution vulnerability

CVSS 8.5 HIGHEPSS 0.4%CWE-94

Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

THEMECO · Cornerstone

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://patchstack.com/database/wordpress/plugin/cornerstone/vulnerability/wordpress-cornerstone-plugin-7-8-8-arbitrary-code-execution-vulnerability?_s_id=cve