CVE WATCH / VULNERABILITY DETAIL
CVE-2026-105894
HIGHCVSS 8.8NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including, 2.9.8. This is due to missing capability checks in the ajax_refresh_nonce and ak_admin_ajax handlers before passing attack
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog