cveboard RSS feed

CVE-2026-100512

cve.nowCritical

Hook & Filter Nested Pages

  • Hook & Filter Nested Pages
  • Critical
  • CVSS 9.8
  • EPSS 0.32%
  • Fixed version listed

What to do

Fixed version listed

Plain text

Affected products

ProductAffectedFixed in
Hook & Filter Nested PagesOnly in the CVE record3.3.3

The CVE record lists 1 range this page cannot state exactly.

Scores and signals

Exploitation
No known exploitation
Severity
Critical, CVSS 9.8 (v3.1, scored by Patchstack)
EPSS
0.32% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 26, 2026)
CISA's SSVC decision points
Exploitation: none. Automatable: yes. Technical impact: total. As of Sep 30, 2026.
Weakness
CWE-502: Deserialization of Untrusted Data
Vendor
Hook & Filter, Nested Pages

Timeline

  1. First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.

Sources