CVE · Critical

CVE-2026-78287 — Improper Control of Generation of Code ('Code Injection')

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-78287 Improper Control of Generation of Code ('Code Injection') Improper Control of Generation of Code ('Code Injection') Critical 10.0 < 3.4.0 3.4.0 2026-11-11 —

CVE-2026-78287 is a Improper Control of Generation of Code ('Code Injection') vulnerability in the WordPress plugin staggs (staggs). Versions before 3.4.0 are affected. Fixed in 3.4.0. CVSS score: 10.0 (Critical). Published 2026-11-11.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.