CVE-2026-116864HIGH NVDCVSS Score 7.2Severity HIGHPublished Oct 29, 2026Vendor unknownDescriptionAuthor PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-8-0-5-php-object-injection-vulnerability?_s_id=cve