CVE-2026-112862: The Participants Database Flaws With No Patch Yet (2026)
If you run the Participants Database plugin on WordPress, CVE-2026-112862 is the one to check tonight. It is a critical PHP object injection flaw, scored 9.8 out of 10, affecting every version up to and including 2.7.8.5 — and as of the evening of 24 October 2026, I could not confirm a vendor patch release … Read more