What is GHSA-v69x-x643-f98h?

GHSA-v69x-x643-f98h is a security advisory published by GitHub Security Advisories with Critical severity. The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of...

Which CVE IDs does GHSA-v69x-x643-f98h cover?

GHSA-v69x-x643-f98h covers the following CVE IDs: CVE-2026-85121. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v69x-x643-f98h?

GHSA-v69x-x643-f98h has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-v69x-x643-f98hCriticalCVSS 9.1

The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of...

Vendor

GitHub Security Advisories

Published

October 11, 2026

Last Modified

October 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-85121 →

📋 Description

The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify WordPress plugin through 1.0.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-85121
https://wpscan.com/vulnerability/74955313-6f62-4e7c-9b7c-0ab345657377
https://github.com/advisories/GHSA-v69x-x643-f98h