sales@hackhalt.com

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total1
Critical1
High0
Medium0
Reset
Showing 1-1 of 1 records
Threat Entry Updated 2026-11-12

Pay with a tweet - Security Vulnerability (CVE-2026-115734)

The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromise.

PLUGIN Pay with a tweet

CVE-2026-115734

CRITICAL CVSS 9.6 2026-11-11