CVE-2026-84738 | AF Companion Plugin up to 2.1.x on WordPress Import code injection

September 18, 2026 Yanac

A vulnerability classified as critical has been found in AF Companion Plugin up to 2.1.x on WordPress. This affects an unknown part of the component Import. Performing a manipulation results in code injection.

This vulnerability was named CVE-2026-84738. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More