CVE-2026-13415 Blast Radius

HIGH • CVSS 7.2The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-13415.

Start Free Scan →← Back to CVE-2026-13415