CVE-2026-77008

CVE-2026-77008 affects the HEL Online Classroom: AI-powered Online Classrooms WordPress plugin, version 1.0.3 and earlier . The plugin lacks an authorization or authentication check when saving its settings, allowing unauthenticated users to overwrite those settings. This enables an attacker to r...