A vulnerability described as critical has been identified in THEMECO Cornerstone Plugin up to 7.8.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in sql injection.

This vulnerability is reported as CVE-2026-54185. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.