Unknown Ultimate Multisite

• CVE-2026-107508 High 8.6 Ultimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' Parameter 0.5%
• CVE-2026-103646 Critical 9.8 Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter 0.4%