infomaniak-dev CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM infomaniak-dev CVE published 2026-11-06

CVE-2026-115831

The VOD Infomaniak plugin for WordPress has an authorization bypass vulnerability in all versions up to and including 1.5.15. This allows authenticated attackers with subscriber-level access and above to initiate unauthorized video imports, consume the site owner's VOD account quota, and insert arbitrary rows into the wp_vod_upload table. The vulnerability is due to the plugin not properly verifying that [truncated]