Skip to content

Improve GHSA-5cfw-whc5-jqgh: add affected/patched version range - #9590

Open
agencyhub wants to merge 1 commit into
github:agencyhub/advisory-improvement-9590from
agencyhub:improve-GHSA-5cfw-whc5-jqgh
Open

agencyhub wants to merge 1 commit into
github:agencyhub/advisory-improvement-9590from
agencyhub:improve-GHSA-5cfw-whc5-jqgh

Conversation

@agencyhub

Copy link
Copy Markdown

Improvement suggestion for GHSA-5cfw-whc5-jqgh (CVE-2026-14356), submitted on behalf of the plugin vendor (LTDHunt / FleekDash).

Changes:

Notes for curation:

  • FleekDash is a premium WordPress plugin distributed outside the wp.org directory, so it has no Packagist entry. I used wpackagist-plugin/fleekdash as the conventional WP-plugin package name — happy to adjust to whatever naming the curation team prefers for non-registry WP plugins.
  • Public reference confirming the patched version: Rapid7 lists "Update fleekdash plugin to version 2.6.2.5, or a newer patched version" as the solution (https://www.rapid7.com/db/vulnerabilities/cve-2026-14356/); the Wordfence record is the upstream source.

@github-actions
github-actions Bot changed the base branch from main to agencyhub/advisory-improvement-9590 September 17, 2026 05:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant