ExactMetrics CVE-2026-1993 & CVE-2026-1992: Chaining Privilege Escalation to Remote Code Execution
Two high-severity CVEs in the ExactMetrics WordPress plugin chain together to escalate a low-privilege analytics viewer into full Remote Code Execution on 1M+ affected sites.
Te
Team Nippysoft