CVE-2026-1103

creationtimestamp| type| source ---|---|--- 2026-01-24 10:21:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5ykp25yp23...

CVE-2026-1103

The AIKTP plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the /aiktp/getToken REST API endpoint in all versions up to, and including, 5.0.04. The endpoint uses the 'verifyuserloggedin' as a permission callback, which only checks if a...