Critical Vulnerability in Ortto WordPress Plugin: CVE-2026-113387
A critical vulnerability (CVE-2026-113387, CVSS 8.6) in the Ortto plugin for WordPress before version 1.0.25 allows unauthenticated attackers to overwrite plugin configurations and serve arbitrary scripts. This unauthenticated configuration update vulnerability has a high impact on integrity and a low impact on confidentiality and availability. Immediate patching to version 1.0.25 or later is strongly recommended.