CVE-2026-111862Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 3 days ago
EPSS0.7%
higher than 53% of CVEsFIRST EPSS, as of 24 Oct 2026
higher than 53% of CVEsFIRST EPSS, as of 24 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites“The incident has been assigned the CVE identifier CVE-2026-111862 (CVSS score: 9.8).”
-
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor“Wordfence assigned the incident CVE-2026-111862 and rates it 9.8 out of 10, with the researcher listed as unknown.”
Indicators reported together
named in the same reports- rank1cdn[.]comin 2 reports
- 43.250.53[.]42in 1 report
- rankmath[.]comin 1 report
- wp-mail[.]netin 1 report
- group[.]onein 1 report
- teamupdraft[.]comin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2026-109618, CVE-2026-109619, CVE-2026-10795
Thanks — we review every report.