Threats tagged 'ghsa-gcw4-cf9q-c2x6'

CVE-2026-19225 is a code injection vulnerability in the Defender Security WordPress plugin before version 6.2.0. It allows any single site administrator on a multisite network to execute arbitrary code across the entire network due to improper restriction of a network-wide setting. This vulnerability affects version 5.0.0 of the plugin. The issue is classified under CWE-94, indicating improper control of code generation.