CVE-2026-57808 Saad Iqbal CVE debrief

Who should care

Defenders responsible for WordPress installations using the WP EasyPay plugin, particularly those with subscriber roles, should verify exposure and assess potential impact.

Why it matters

CVE-2026-57808 is a MEDIUM-severity vulnerability in the WP EasyPay plugin that allows subscribers to delete arbitrary content. Defenders responsible for WordPress installations using this plugin should verify exposure, assess potential impact, and consider upgrading to a patched version.

• Potential content deletion by subscribers may require verification and impact assessment.
• Defenders should prioritize verifying exposure and assessing potential impact on WordPress installations using the affected plugin version.

Technical summary

The WP EasyPay plugin vulnerability (CVE-2026-57808) allows subscribers to delete arbitrary content in versions up to 4.5.0. The issue has a CVSS score of 6.5 and is classified as MEDIUM severity.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact on WordPress installations using the affected plugin version.

Recommended defensive actions

• Verify WordPress installations for the affected WP EasyPay plugin version (<= 4.5.0).
• Assess potential impact on content management and subscriber roles.
• Consider upgrading to a patched version of the WP EasyPay plugin if available.

Evidence notes

The vulnerability was reported by Patchstack and is documented in the CVE Program record and NVD vulnerability detail pages.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.