A Missing Authorization vulnerability in the Advanced File Manager plugin for WordPress, versions up to 5.4.14, allows attackers to exploit incorrectly configured access control security levels. This issue has a CVSS score of 6.5 and is classified as MEDIUM severity. The vulnerability impacts WordPress installations with the Advanced File Manager plugin, potentially allowing unauthorized actions. Defender [truncated]
The CVE-2026-96449 vulnerability affects the WordPress WP EasyPay plugin, versions up to and including 4.5.4. This issue is related to a Missing Authorization vulnerability, which allows for Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability has a CVSS score of 5.3 and a severity of MEDIUM. Defenders responsible for WordPress installations with the WP EasyPay plugin should [truncated]
PatchSiren debrief for CVE-2026-110367: The APIExperts Square for WooCommerce plugin, used in WordPress installations, has a Broken Access Control vulnerability (CVE-2026-110367) affecting versions up to 4.7.5. This medium-severity issue could allow unauthorized access due to missing authorization, potentially impacting e-commerce operations and customer data. Defenders should assess exposure and prioriti [truncated]
CVE-2026-48838 is a high-severity Unauthenticated Cross Site Scripting (XSS) vulnerability in the Post SMTP plugin versions <= 3.6.2. The vulnerability has a CVSS score of 7.1 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-48838).
