CVE-2026-126119

The Streamit WordPress plugin versions prior to 1.3.10 is vulnerable to Remote Code Execution (RCE) and privilege escalation . The root cause is a lack of authorization and nonce verification on an unauthenticated AJAX route, which allows an unauthenticated attacker to invoke arbitrary PHP functi...