Critical Zero-Day Vulnerability Found in Popular WordPress Plugin

Security researchers have discovered a critical zero-day vulnerability affecting over 500,000 WordPress websites.

The vulnerability allows remote code execution and has been assigned CVE-2026-1234 with a CVSS score of 9.8.

Site owners are urged to update immediately or disable the affected plugin.