CVE-2026-6512
|
| |
|
|
Software afectado |
WORDPRESS |
|
|
|
The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary posts, pages, products, or orders, mass-delete all comments on any post, and change any post's status. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-6512 |
