CVE-2026-59543
A critical remote code execution flaw exists in the Advanced Views plugin for versions up to 3.8.11. An attacker can run arbitrary code on the server without needing to log in or use a browser interface.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users of the Advanced Views plugin version 3.8.11 or older.
Real-world impact
An attacker could take full control of the affected system, steal data, install malware, or disrupt services.
Why this severity
The CVSS score of 9.9 reflects that the vulnerability is network reachable, requires low effort, and allows an attacker to execute code with high impact on confidentiality, integrity, and availability.
What to do about it
- ›Upgrade Advanced Views to a version newer than 3.8.11 if a patch is available, or contact the vendor for guidance.
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
NVD description