2 matches found
CVE-2026-89023
ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numer...
8.8CVSS0.00385EPSS
SaveExploits0References2
CVE-2026-89023: Missing Authorization
ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numer...
8.8CVSS5.9AI score0.00385EPSS
SaveExploits0References2
20