CVE-2026-14557

Kritik

Teknik Veri (Otomatik)

CVSS Skoru: 9.1
EPSS: 0.4%
CWE: CWE-287
KEV Durumu: Hayır

Yayım tarihi: 3 Ağustos 2026

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID.

Referanslar

https://wpscan.com/vulnerability/ed5c7632-a307-43f1-bff0-f70977522e2e/

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.