Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popup_submit. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6514 Arbitrary File Read in InfusedWoo Pro WordPress Plugin Versions Up to 5.1.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6514
Post summary
CVE-2026-6514 exposes an arbitrary file read flaw in InfusedWoo Pro WordPress Plugin up to version 5.1.2; details are linked via a Vulmon page.
⚠️ HIGH — CVE-2026-6514 The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.… CVSS 7.5 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6514 #WordPress #CyberSecurity #InfoSec
Post summary
The post discloses CVE‑2026‑6514, an arbitrary file read flaw in all versions of the InfusedWoo Pro WordPress plugin up to 5.1, rated CVSS 7.5.