CVE-2026-45293

Packagist/wp-coding-standards/wpcs CVE-2026-45293: high 8.6, EPSS 0.25%

WordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerability

Action: Upgrade wp-coding-standards/wpcs to 3.4.1 or later.

composer require wp-coding-standards/wpcs:3.4.1

Affected

Fixed versions

Sources

• osv: GHSA-3pwp-g2mj-5p3v
• https://github.com/WordPress/WordPress-Coding-Standards/security/advisories/GHSA-3pwp-g2mj-5p3v
• https://github.com/WordPress/WordPress-Coding-Standards/pull/2771
• https://github.com/WordPress/WordPress-Coding-Standards/commit/a29048d0bbef5cf25d42349c74e4072d3cbc8325
• https://github.com/WordPress/WordPress-Coding-Standards
• https://github.com/WordPress/WordPress-Coding-Standards/releases/tag/3.4.1

CVE-2026-45293 · published 2026-07-28T14:28:12Z · modified 2026-07-28T14:56:51.873225Z · JSON