CVE-2026-85113

Summary

The flaw allows unauthenticated users to execute arbitrary shortcodes by nesting them, potentially leading to remote code execution or data leakage.

Exploitability

Exploitation requires a user to be able to inject shortcode content, which may be feasible through comments or other public inputs.

Blast radius

If exploited, the impact could range from unauthorized access to sensitive information to full site compromise.

Prioritized remediation

Update GiveWP WordPress plugin to version 4.16.9 or later immediately.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.