PatchSiren

lvaudore CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM lvaudore CVE published 2026-04-08

CVE-2026-39685

A Missing Authorization vulnerability was discovered in The Moneytizer plugin, affecting versions from n/a through 10.0.10. This issue allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. It was published on 2026-04-08T09:16:40.403Z and last modified on [truncated]