Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-32566. Reason: This candidate is a reservation duplicate of CVE-2026-32566 Notes: All CVE users should reference CVE-2026-32566 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-08 | 1 | General1 |
| 2026-09-09 | 1 | Patch1 |
| 2026-09-11 | 1 | Disclosure1 |
#schwachstellen CVE-2026-15354: WS Form LITE-Plugin mit über 10.000 Installationen potenziell betroffen #cve202615354 #wordpress #wsformlite https://cybersecurity-news.de/cve-2026-15354-ws-form-lite-plugin-mit-ueber-10000-installationen-potentiell-betroffen
Post summary
The post announces that the WS Form LITE plugin may be affected by CVE‑2026‑15354, but offers no technical details, exploit code, or mitigation steps.
🔓 ACPT (Premium) plugin <=2.0.66: unauthenticated privilege escalation via the `submit()` function's missing auth check on `acpt_form_post_id`. CVSS 9.8. Update immediately. CVE-2026-15354 #cybersecurity #wordpress #vulnerabilities https://secalerts.co/vulnerability/CVE-2026-15354?utm_campaign=x https://t.co/AxcspZANmq
Post summary
CVE‑2026‑15354 is disclosed as a CVSS 9.8 unauthenticated privilege escalation in the ACPT plugin; users are urged to update immediately.
🚨 CRITICAL: CVE-2026-15354 (CVSS 9.8) - ACPT Premium WordPress plugin vulnerable to unauthenticated privilege escalation. Attackers can hijack admin accounts via public forms. Patch immediately! #CVE #Vulnerability #PatchNow #WordPress https://t.co/iUysp3YHMC
Post summary
A critically scored CVE-2026-15354 affects the ACPT Premium WordPress plugin, enabling unauthenticated privilege escalation through public forms; immediate patching is advised.