
CVE-2026-80099
Newfold plugins (wp-module-data <= 2.9.7) Unauthenticated
exploitationinformation-gatheringpassword-attacks+7
1

Newfold plugins (wp-module-data <= 2.9.7) Unauthenticated

Shell PoC for CVE-2026-87902, an unauthenticated WordPress core LFI via page-template resolution that chains to RCE through pearcmd.php.