type: cve · created: 2026-10-13 · updated: 2026-10-13 · tags: [cve] · confidence: medium · severity: high · affected_sectors: [global] · au_impact: false
SOCRadar reports two pipelines running at once: a global automated campaign against WordPress and e-commerce platforms exploiting flaws including wp2shell (CVE-2026-63030 and CVE-2026-60137) and CVE-2026-4815, an SQL injection in the Support Board WordPress plugin, plus a curated manual campaign against Ukrainian energy and critical infrastructure.
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-4815 |
| CVSS | 8.8 (HIGH) |
| Vendor / product | schiocco |
| Reported | 2026-10-13 |