CVE-2026-9710

creationtimestamp| type| source ---|---|--- 2026-07-07 06:16:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpzxdpv5zk2m...

CVE-2026-9710

The Cornerstone WordPress plugin before 7.8.8 does not enforce capability checks on one of its CSS-preview request handlers, and exposes the nonce needed to call it to every logged-in user on any wp-admin page, allowing any authenticated user to evaluate dynamic content tokens against arbitrary...

CVE-2026-9710

The Cornerstone WordPress plugin (premium version bundled with the X theme ) versions prior to 7.8.8 is vulnerable to an arbitrary user password hash disclosure . The flaw exists because the plugin fails to enforce capability checks on one of its CSS-preview request handlers and exposes the neces...