CVE-2026-45293 | WordPress Coding Standards up to 3.4.0 EnqueuedResourceParameter is_falsy ver os command injection

July 28, 2026 Yanac

A vulnerability, which was classified as critical, has been found in WordPress Coding Standards up to 3.4.0. This impacts the function is_falsy of the component EnqueuedResourceParameter. The manipulation of the argument ver leads to os command injection.

This vulnerability is traded as CVE-2026-45293. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More