CVE-2026-13110

creationtimestamp| type| source ---|---|--- 2026-07-29 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrrtoltjdn2c...

CVE-2026-13110

The Storegrowth Sales Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.1.0. This is due to a missing capability check on the bogocategorymsgcreate AJAX handler, which is registered for both authenticated wpajax and unauthenticated wpajaxnopriv...