Unknown Insurify vulnerabilities

2 CVEs affecting Unknown Insurify, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-86717, published 2026-10-11.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-86717, published 2026-10-11. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can…
• CVE-2026-85121, published 2026-10-11. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options…