CVE-2026-16256

cvss 9.8

Anyone on the internet can create a full admin account for your WordPress site, giving them total control.

Patch now

why it matters — synthesized by an LLM from the sources below

open on the board →primary source ↗

signal timeline

CVE-2026-16256 — The POUCO Import Users WordPress plugin through 1.0.0 does not …
NVD · 13d ago

first seen 1h ago · last seen 6m ago

intelyard daily

One short email each weekday: what mattered in tech, written from source data and checked by a human. No account needed, one-click unsubscribe, and we never sell or share the address.