6 matches found
CVE-2026-105894
The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including, 2.9.8. This is due to missing capability checks in the ajaxrefreshnonce and akadminajax handlers before passing...
EUVD-2026-114234
The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including, 2.9.8. This is due to missing capability checks in the ajaxrefreshnonce and akadminajax handlers before passing...
CVE-2026-105894 Ak Framework <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update
The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including, 2.9.8. This is due to missing capability checks in the ajaxrefreshnonce and akadminajax handlers before passing...
CVE-2026-105894
The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine theme, is vulnerable to Privilege Escalation in versions up to and including 2.9.8 . The root cause is a lack of capability checks within the ajax_refresh_nonce and ak_admin_ajax handlers, which allows attackers ...
CVE-2026-105894 Ak Framework <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update
The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including, 2.9.8. This is due to missing capability checks in the ajaxrefreshnonce and akadminajax handlers before passing...
CVE-2026-105894: akbilisim Ak Framework: The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to…
The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including, 2.9.8. This is due to missing capability checks in the ajaxrefreshnonce and akadminajax handlers before passing...