CVE-2026-16259

CVE-2026-16259 affects the Uix UserCenter WordPress plugin through version 1.0.3 . The vulnerability stems from two combined weaknesses: the plugin does not verify that the account being modified through an unauthenticated profile-update action actually belongs to the requester, and it authentica...

EUVD-2026-68042

The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...