CVE-2026-112856 | meREX Group Vagabonds Plugin up to 1.3.10 on WordPress deserialization

A vulnerability was found in meREX Group Vagabonds Plugin up to 1.3.10 on WordPress. It has been classified as critical. This affects an unknown part. The manipulation leads to deserialization.

This vulnerability is documented as CVE-2026-112856. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More