CVE-2026-65556

The vulnerability allows unauthenticated PHP Object Injection in WPBruiser versions up to 3.1.43, potentially enabling attackers to execute arbitrary code on affected systems. This critical flaw poses a significant risk to any website utilizing this anti-spam plugin, making it essential for administrators of these sites to prioritize immediate updates or mitigations. Organizations relying on WPBruiser for spam protection should take urgent action to secure their installations against potential exploitation.