CyberRota
Back to database

CVE-2026-6433

HIGH · CVSS 7.3 EPSS 0.97%

Source: NVD + CISA KEV + EPSS · Published: 2026-05-11 · Last synced: 2026-06-09

CyberRota Analysis

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-6433
Severity
HIGH
CVSS
7.3
EPSS
0.97%
WordPress

Original NVD Description

The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, and the result is passed to eval(), allowing unauthenticated users to execute arbitrary PHP code on the server.