CVE-2026-5727

The Hello Plus plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 1.7.7 . The root cause is the plugin's failure to properly verify user permissions when performing certain actions. This allows authenticated attackers with Contributor-level access (or hi...

EUVD-2026-96058

The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access...

WordPress Hello Plus plugin <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to Template Activation vulnerability

Authenticated Contributor+ Missing Authorization to Template Activation vulnerability discovered by normaandersonfrank in WordPress Plugin Hello Plus versions = 1.7.7...