CVE · Critical

CVE-2026-115252 — Confection WordPress Cable [confection] <= 0.4.0 (unfixed)

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-115252 Confection WordPress Cable [confection] <= 0.4.0 (unfixed) Improper Control of Generation of Code ('Code Injection') Critical 10.0 < 0.4.0 0.4.0 2026-11-09 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.