Skydropx CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Skydropx CVE published 2026-10-14

CVE-2026-108480

The CVE-2026-108480 vulnerability affects the WordPress Skydropx plugin, versions up to and including 2.1.4. This vulnerability is a Missing Authorization issue, which allows attackers to exploit incorrectly configured access control security levels. The CVSS score for this vulnerability is 8.2, indicating a high severity level. Defenders responsible for WordPress installations with the Skydropx plugin sh [truncated]