CVE-2026-65553 - Vulnerability Details - OpenCVE

Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products

References

Link	Providers
https://patchstack.com/database/wordpress/plugin/spider-analyser/vulnerability/wordpress-spider-analyser-wordpress-plugin-2-1-3-remote-code-execution-rce-vulnerability?_s_id=cve

History

Thu, 06 Aug 2026 14:45:00 +0000

Type	Values Removed	Values Added
Description		Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.
Title		WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
Weaknesses		CWE-94
References		https://patchstack.com/database/wordpress/plugin/spider-analyser/vulnerability/wordpress-spider-analyser-wordpress-plugin-2-1-3-remote-code-execution-rce-vulnerability?_s_id=cve
Metrics		cvssV3_1 `{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2026-08-06T14:27:36.157Z

Updated: 2026-08-06T15:36:06.805Z

Reserved: 2026-07-22T08:54:23.961Z

Link: CVE-2026-65553

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-06T16:00:06Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-65553", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "state": "PUBLISHED", "assignerShortName": "Patchstack", "dateReserved": "2026-07-22T08:54:23.961Z", "datePublished": "2026-08-06T14:27:36.157Z", "dateUpdated": "2026-08-06T15:36:06.805Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-08-06T14:27:36.157Z"}, "title": "WordPress Spider Analyser \u2013 WordPress\u641c\u7d22\u5f15\u64ce\u8718\u86db\u5206\u6790\u63d2\u4ef6 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-253", "descriptions": [{"lang": "en", "value": "CAPEC-253 Remote Code Inclusion"}]}], "affected": [{"vendor": "wbolt.com", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "spider-analyser", "product": "Spider Analyser – WordPress\u641c\u7d22\u5f15\u64ce\u8718\u86db\u5206\u6790\u63d2\u4ef6", "versions": [{"lessThanOrEqual": "2.1.3", "status": "affected", "version": "n/a", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress\u641c\u7d22\u5f15\u64ce\u8718\u86db\u5206\u6790\u63d2\u4ef6 <= 2.1.3 versions."}], "value": "Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress\u641c\u7d22\u5f15\u64ce\u8718\u86db\u5206\u6790\u63d2\u4ef6 <= 2.1.3 versions."}], "references": [{"tags": ["vdb-entry"], "url": "https://patchstack.com/database/wordpress/plugin/spider-analyser/vulnerability/wordpress-spider-analyser-wordpress-plugin-2-1-3-remote-code-execution-rce-vulnerability?_s_id=cve"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "version": "3.1", "baseSeverity": "CRITICAL", "baseScore": 10, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-06T15:31:08.336805Z", "id": "CVE-2026-65553", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T15:36:06.805Z"}}]}}