CVE-2026-78287: WordPress STAGGS plugin <= 3.3.0 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allows Remote Code Inclusion.This issue affects STAGGS: from n/a through 3.3.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress STAGGS pluginto a version that resolves this vulnerability.Fixed in 3.4.0
Event History
Frequently Asked Questions
Who can exploit this issue?
The reported vector is network-accessible and requires no privileges or user interaction, so an unauthenticated remote attacker could exploit an affected installation.
Which STAGGS versions are affected?
STAGGS versions through 3.3.0 are affected. The earliest affected version is not specified.
What is the potential impact of successful exploitation?
Successful exploitation may allow remote code execution through remote code inclusion. The provided severity metrics indicate high impact to confidentiality, integrity, and availability, including impacts beyond the vulnerable component.