CVE-2026-13432

The ThumbPress WordPress plugin versions prior to 6.2.2 contains a vulnerability where it fails to perform a capability check on one of its AJAX actions . This oversight allows authenticated users with subscriber-level access or higher to deactivate the plugin. Successful exploitation results in ...