CVE-2026-49774

Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station allows Remote Code Inclusion. This issue affects RD Station: from n/a through 5.6.0.

Score

CVSS 3.1 9.9 Critical

Status

Deferred - audit@patchstack.com

Published

2026-06-16

Last modified

2026-10-26

Weaknesses

CWE-94

Affected products

• Rd Station (Filipe Nasc)

References

• https://patchstack.com/database/wordpress/plugin/integracao-rd-station/vulnerability/wordpress-rd-station-plugin-5-6-0-…