CVE-2026-81766

CVE-2026-81766 affects the Really Simple Security WordPress plugin before 9.8.0 . The vulnerability resides in the rsp_upgrade_install_plugin function, which fails to verify that the requesting user is authorized to install a plugin from a user-supplied URL. On a WordPress multisite network, this...