CVE of the day — CVE-2026-16940 (CVSS 10,0, critical)?Procedurally generated video from real data from official public sources. Backgrounds are abstract AI-generated images and the narration is a synthetic voice (TTS). No real event is filmed or altered.

CVE-2026-16940: Critical gravity, CVSS score 10,0 out of 10 according to the National Vulnerability Database.

The Custom Fields WordPress plugin before 1.5.1 does not validate to user-supplied file path before deletion, allowing unauthenticated users to delete arbitrary files on the server (such as wp-config. php), which can lead..

Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.