MEDIUM
Muralidharan Ramasamy
CVE published 2026-10-14
CVE-2026-107417
A Missing Authorization vulnerability in the WordPress Push Notification for Post and BuddyPress plugin allows attackers to exploit incorrectly configured access control security levels. This issue affects the plugin from version n/a through 3.23. Defenders should review access control configurations and verify plugin versions to mitigate potential risks. The vulnerability could lead to unauthorized acces [truncated]