CVE-2026-94504Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 12 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More“…6268 (Splunk), CVE-2026-85097 (Bricksforge WordPress plugin), CVE-2026-93836 (WPC Product Bundles for WooCommerce WordPress plugin), CVE-2026-94504 (Ninja Forms WordPress plugin), CVE-2026-105133, CVE-2026-105134 (AhsayCBS), CVE-2026-96940 (Microsoft Exchange Server), CVE-2026-63…”
-
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE“…abilities in two unrelated WordPress plugins, WPC Product Bundles for WooCommerce (CVE-2026-93836, CVSS score: 7.1) and Ninja Forms (CVE-2026-94504, CVSS score: 7.1), to deliver a JavaScript payload ("x.js") capable of deploying a backdoor plugin and creating rogue admin accounts…”
Indicators reported together
named in the same reports- fbijobs[.]govin 1 report
Copy this indicator · defanged
Also named with it: CVE-2026-85097, CVE-2026-93836, CVE-2026-102489, CVE-2026-102490, CVE-2026-96940, CVE-2026-59265, CVE-2026-63277, CVE-2026-21589, CVE-2026-86360, CVE-2026-86361, CVE-2026-86362, CVE-2026-91140, CVE-2026-102255, CVE-2026-106197, CVE-2026-106358, CVE-2026-106382, CVE-2026-106347, CVE-2026-102404, CVE-2026-102406
Thanks — we review every report.