CVE-2026-9710— Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9710
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Cornerstone WordPress plugin before 7.8.8 does not enforce capability checks on one of its CSS-preview request handlers, and exposes the nonce needed to call it to every logged-in user on any wp-admin page, allowing any authenticated user to evaluate dynamic content tokens against arbitrary users and disclose their sensitive metadata including raw password hashes. This affects the premium co Cornerstone page builder distributed bundled with the X , not the unrelated free `cornerstone` Cornerstone WordPress plugin before 7.8.8 (v0.8.x) on the .org repository.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Unknown | Cornerstone | 3.0.0 ~ 7.8.8 | - |
II. Public POCs for CVE-2026-9710
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9710
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-9710 (1)
Same Patch Batch · Unknown · 2026-06-24 · 6 CVEs total
| CVE-2026-9709 | Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User M | |
| CVE-2026-10531 | AI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode Attribute | |
| CVE-2026-10753 | Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update | |
| CVE-2026-10749 | Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData | |
| CVE-2026-10735 | ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server |
IV. Related Vulnerabilities
Same product: Cornerstone
- CVE-2026-9709
Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - CVE-2026-54185
WordPress Cornerstone plugin < 7.8.8 - SQL Injection vulnera - CVE-2026-49113
WordPress Cornerstone plugin < 7.8.8 - Arbitrary Code Execut - CVE-2025-63072
WordPress Cornerstone plugin <= 7.7.3 - Cross Site Scripting - CVE-2024-32570
WordPress Cornerstone plugin <= 0.8.0 - Reflected Cross Site
Same vendor: Unknown
- CVE-2026-10835
SALESmanago & Leadoo < 3.11.3 - Subscriber+ SQL Injection - CVE-2026-8380
Frontend File Manager Plugin <= 23.6 - Author+ Arbitrary Pos - CVE-2026-10823
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Po - CVE-2025-10268
Printcart Web to Print Product Designer for WooCommerce <= 2 - CVE-2026-9702
InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel
V. Comments for CVE-2026-9710
No comments yet