CyberSecBulletin

Insurify vulnerabilities

We track 2 vulnerabilities in Insurify products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.

2vulnerabilities
2critical
0high
0exploited
9.1average CVSS score

Latest Insurify vulnerabilities

  • 9.1 Critical severity

    Insurify: Missing Authorization

    CVE-2026-86717Insurify

    The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.

  • 9.1 Critical severity

    Insurify: Missing Authorization

    CVE-2026-85121Insurify

    The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactiv