A vulnerability described as critical has been identified in bitpressadmin Bit integrations Plugin up to 2.8.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Attachment Field Handler . Executing a manipulation can lead to server-side request forgery. This vulnerability appears as CVE-2026-11989 . The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.