CVE-2026-103646 | Ultimate Multisite Plugin up to 2.16.x on WordPress improper authentication

October 8, 2026 Yanac

A vulnerability has been found in Ultimate Multisite Plugin up to 2.16.x on WordPress and classified as critical. Affected is an unknown function. The manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-103646. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More