WeddingCity Lite CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review WeddingCity Lite CVE published 2026-10-11

CVE-2026-106029

The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide. This vulnerability affects WordPress installations with the WeddingCity Lite plugin, particularly those with publicly accessible content management interfaces. Defe [truncated]