CVE-2026-104001 | rilwis Slim SEO Plugin up to 4.11.1 on WordPress Shortcode Execution do_shortcode author os command injection

October 16, 2026 Yanac

A vulnerability was found in rilwis Slim SEO Plugin up to 4.11.1 on WordPress. It has been declared as critical. This affects the function do_shortcode of the component Shortcode Execution. Executing a manipulation of the argument Author can lead to os command injection.

This vulnerability is handled as CVE-2026-104001. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More