CVE-2026-85681

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

CVE-2026-85681

The WP Component WordPress plugin (through 2.2.4 ) lacks capability or nonce checks on an action exposed to unauthenticated users. Both the option name and option value are taken directly from the request, allowing unauthenticated attackers to overwrite any site option . On a single-site installa...

CVE-2026-85681 WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

EUVD-2026-76796

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

PT-2026-90580

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

CVE-2010-3473

The CVE-2010-3473 vulnerability affects IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021, described as an open redirect in the Workplace component that can direct users to arbitrary websites and enable phishing via unspecified vectors. The connected documents reiterate the open-red...