CVE-2026-28165

Unauthenticated Privilege Escalation in the WordPress Digits plugin (versions <= 9.2), discovered by VanTastic via Patchstack. The flaw requires no authentication or user interaction, is network-exploitable with low complexity, and carries a CVSS 9.8 (CRITICAL) score with high impact on confid...