Is CVE-2026-100506 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-100506?

CVE-2026-100506 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-100506

Description

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1.