CVE-2026-100506: Wp Spell Check

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1.

Affected products

• Wp Spell Check Wp Spell Check: up to and including 12.1

Published 2026-10-05. Last modified 2026-10-06.