CVE-2026-77008

CVE-2026-77008 affects the HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through version 1.0.3 . The root cause is a missing authentication/authorization check on the plugin's settings-saving endpoint, allowing any unauthenticated user to overwrite the stored configuration. ...