Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites Vulnerability Report Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites Do Son July 29, 2026 0 TL;DR Threat actors injected a critical backdoor into the Advanced Responsive Video Embedder plugin. This flaw tracks... Read More Read more about Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites