Vulners
Lucene search
CVE-2026-10580
๐๏ธย 05 Jun 2026ย 18:31:11Reported byย WordfenceTypeย 
ย cve๐ย web.nvd.nist.gov๐ย 41ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2026-10580 | 5 Jun 202618:31 | โ | attackerkb |
 | CVE-2026-10580 | 5 Jun 202620:01 | โ | circl |
 | WordPress plugin Hippoo Mobile App for WooCommerce ๆๆ้ฎ้ขๆผๆด | 5 Jun 202600:00 | โ | cnnvd |
 | CVE-2026-10580 Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API | 5 Jun 202618:31 | โ | cvelist |
 | EUVD-2026-34887 | 5 Jun 202618:31 | โ | euvd |
 | Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover | 25 Jun 202605:45 | โ | nuclei |
 | CVE-2026-10580 | 5 Jun 202619:16 | โ | nvd |
 | WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability | 9 Jun 202609:25 | โ | patchstack |
 | PT-2026-47026 | 5 Jun 202600:00 | โ | ptsecurity |
 | CVE-2026-10580 | 6 Jun 202618:43 | โ | redhatcve |
10
Node
[
{
"vendor": "hippooo",
"product": "Hippoo Mobile App for WooCommerce",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "1.9.4",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| password | request body | wc-hippoo/v1/ext/wp/v2/users/<id> | Authentication bypass via REST endpoint allows unauthenticated users to reset any WordPress user password, potentially taking full administrative control. | CWE-285 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 10:12Current
5.4Medium risk
Vulners AI Score5.4
CVSS 3.19.8
EPSS0.02841
SSVC