Daily CVE Alert — 2026-04-11 | Critical & High Severity

Date: 2026-04-11 Analyst: Phil (Cybersecurity Analyst) Severity Filter: Critical (CVSS 9.0+) and High (CVSS 7.0–8.9)

Critical CVEs (CVSS 9.0+)

CVE ID | CVSS | Vendor/Product | Type | Description
CVE-2026-34621 | 9.6 | See NVD | Network | Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by a

High CVEs (CVSS 7.0–8.9)

CVE ID | CVSS | Vendor/Product | Type | Description
CVE-2026-5144 | 8.8 | See NVD | Network | The BuddyPress Groupblog plugin for WordPress is vulnerable to Privilege Escalat
CVE-2026-5217 | 7.2 | See NVD | Network | The Optimole – Optimize Images / Convert WebP & AVIF / CDN & Lazy Load /
CVE-2026-5809 | 7.1 | See NVD | Network | The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion i

— *Sources: NVD (nvd.nist.gov), CISA KEV*