CVE-2026-15038

Affected software: InfiniteWP Client WordPress plugin (before 1.13.6). Vulnerable in the handling of site-connection state and authenticity of requests to the remote-management endpoint on WordPress Multisite installations. Root cause: improper verification enables unauthenticated attackers to bi...