CVE-2026-40801

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

CVE-2026-40801 WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

EUVD-2026-96538

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

CVE-2026-40801

The Wordable WordPress plugin, versions

CVE-2020-36724

The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hashhmac function and the use of a loose comparison on the hash which allows an attacker to trick the functio...

CVE-2020-36724

The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hashhmac function and the use of a loose comparison on the hash which allows an attacker to trick the functio...

CVE-2020-36724

The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hashhmac function and the use of a loose comparison on the hash which allows an attacker to trick the functio...

Authentication flaw

The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hashhmac function and the use of a loose comparison on the hash which allows an attacker to trick the functio...

CVE-2020-36724 Wordable <= 3.1.1 - Authentication Bypass

The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hashhmac function and the use of a loose comparison on the hash which allows an attacker to trick the functio...

CVE-2020-36724

The CVE-2020-36724 issue affects the Wordable plugin for WordPress (versions up to and including 3.1.1). The root cause is an authentication bypass caused by using a user-supplied hashing algorithm passed to hash_hmac() and a loose hash comparison, which can mislead the system into accepting a fo...

CVE-2020-36724 Wordable <= 3.1.1 - Authentication Bypass

The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hashhmac function and the use of a loose comparison on the hash which allows an attacker to trick the functio...

CVE-2020-36724: Authentication Bypass Using an Alternate Path or Channel

The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hashhmac function and the use of a loose comparison on the hash which allows an attacker to trick the functio...

WordPress Plugin Wordable 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-11866 · WordPress · Wordable

Name of the Vulnerable Software and Affected Versions: Wordable plugin for WordPress versions up to, and including, 3.1.1 Description: The issue is related to authentication bypass due to the use of a user-supplied hashing algorithm passed to the hash hmac function and a loose comparison on the...

Wordable < 3.1.2 - Plugin's Authentication Bypass

This could allow an unauthenticated user to bypass the plugin authentication process and temporarily gain administrative privileges, allowing the publication of pages and posts on the blog, as well as the upload of media files...

WordPress Wordable plugin <= 3.1.1 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by NinTechNet in WordPress Wordable plugin versions = 3.1.1. Solution Update the WordPress Wordable plugin to the latest available version at least 3.1.2...