ctrlINT What the industry said about every indicator, with the quote

CVE-2026-27540Vulnerability

Reported by 2 independent sources · first reported by Infosecurity Magazine · last reported

Last reported 12 days ago

What the reports say

2 reports, newest first · the exact sentence from each

  1. “CVE-2026-27540”

    Recorded FutureVendor
    September 2026 CVE Landscape

  2. “…echnical write-up published on September 14, Wordfence said its firewall had blocked more than 100,000 exploitation attempts against CVE-2026-27540 in WooCommerce Wholesale Lead Capture, a premium plugin from Rymera Web Co with an estimated 6000 active installations.”

    Infosecurity MagazineNews
    PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug

Indicators reported together

named in the same reports

Also named with it: CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-85880, CVE-2026-87491, CVE-2026-48710, CVE-2025-39964, CVE-2026-20316, CVE-2026-39987, CVE-2026-60137, CVE-2026-63030, CVE-2021-29441, CVE-2026-81963, CVE-2026-81578, CVE-2026-82078, CVE-2026-53266, CVE-2026-76460, CVE-2026-76461, CVE-2026-58704

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-27540 here?
No account needed. We do not store your IP address.