CVE-2026-78287

Staggs remote code execution in WordPress plugin

critical · 10.0

Fix listed

Staggs

Published Nov 11, 2026, 11:00 UTC

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allows Remote Code Inclusion.This issue affects STAGGS: from n/a through 3.3.0.

Reported fixed versions

3.4.0

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.