CVE-2026-77010

CVE-2026-77010 affects the HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through version 1.0.3 . The root cause is twofold: the plugin does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code. As a result, an un...