{"id":"CVE-2026-85121","published":"2026-10-11T07:17:26.007","lastModified":"2026-10-13T20:36:00.850","description":"The Insurify  WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify  WordPress plugin through 1.0.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/74955313-6f62-4e7c-9b7c-0ab345657377/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Insurify WordPress plugin lacks proper authorization and nonce checks on an AJAX endpoint, allowing unauthenticated attackers to modify critical WordPress options and potentially take sites offline. This vulnerability enables arbitrary configuration changes that can deactivate the plugin and disrupt site functionality.","exploitability":"Exploitation is straightforward requiring only a single HTTP request to the vulnerable AJAX endpoint with crafted parameters, with no prerequisites for authentication or additional conditions.","blast_radius":"The impact could affect all WordPress sites using Insurify plugin version 1.0, potentially causing widespread service disruption and plugin deactivation across multiple installations.","remediation":"Disable the affected AJAX endpoint immediately or upgrade to version 2.590 or later if available, otherwise implement a temporary workaround by restricting access to the vulnerable endpoint via .htaccess rules.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["wp-plugin","config-modification","unauth-ajax"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:49:30.355Z"}}