CyberSectr
← CVE Veritabanı

CVE-2026-78362

Kritik

Teknik Veri (Otomatik)

CVSS Skoru
9.8
EPSS
0.3%
CWE
CWE-269
KEV Durumu
Hayır

Yayım tarihi: 5 Eylül 2026

The SEO Flow by LupsOnline WordPress plugin before 3.0.3 does not correctly validate the credential supplied with its API requests, allowing unauthenticated users to be served as the administrator who configured the SEO Flow by LupsOnline WordPress plugin before 3.0.3 and take over the site. Exploitation requires the SEO Flow by LupsOnline WordPress plugin before 3.0.3 to have been configured, which is its normal operating state.

Referanslar

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.