CVE-2026-97283
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
The Advanced Post Manager plugin (from Liquid Web / StellarWP) for WordPress up to version 4.5.5 contains an untrusted data deserialization vulnerability that allows Object Injection.
Risk Assessment
An attacker can exploit the vulnerability to execute malicious code or take over the WordPress site, leading to integrity and availability compromise.
Recommendation
Update the Advanced Post Manager plugin to the latest patched version and restrict access to the admin panel.
Other vulnerabilities in Advanced Post Manager
Original NVD description (English source)
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS