CVE-2026-73992

Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions.

Score

CVSS 3.1 9.9 Critical

Status

Deferred - audit@patchstack.com

Published

2026-08-20

Last modified

2026-08-20

Weaknesses

CWE-94

Affected products

• Query Wrangler (Jonathan Daggerhart)

References

• https://patchstack.com/database/wordpress/plugin/query-wrangler/vulnerability/wordpress-query-wrangler-plugin-1-5-57-re…