CRITICAL 9.8 NVD

CVE-2026-17032

Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy

Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.

References

https://wpscan.com/vulnerability/7ca5ad30-1792-4014-bfad-88911cd64713/

Published: 2026-08-06 · Source: NVD · Feed updated: 2026-08-07

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-08-06 via NVD.

Risk Timeline

CVE Disclosed2026-08-06 · 0 days ago

Remediation Resources

Official Advisory

wpscan.com/vulnerability/7ca5ad30-1792-4014-bfad-88911cd64713/

vulnfeed aggregates 9207 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.