This vulnerability (CVE-2026-65553) affects the Spider Analyser WordPress plugin up to version 2.1.3 and is classified under CWE-94 (Improper Control of Generation of Code). It allows unauthenticated attackers to perform remote code execution, which can lead to complete system compromise. The CVSS 3.1 base score is 10.0, reflecting network attack vector, no privileges required, no user interaction, and full confidentiality, integrity, and availability impact. The vulnerability is published and confirmed but lacks a vendor-provided patch or remediation level. The affected product is not a cloud service, so remediation depends on the plugin vendor or user applying updates once available.

Successful exploitation allows unauthenticated remote attackers to execute arbitrary code on the affected system, potentially leading to full system compromise including data theft, service disruption, and further network penetration. The impact is critical given the highest CVSS score and the nature of remote code execution without any authentication or user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the Spider Analyser plugin or restricting access to it to trusted users only. Monitor vendor channels for updates and apply patches immediately once available.