CVE-2026-5727

The Hello Plus plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 1.7.7 . The root cause is the plugin's failure to properly verify user permissions when performing certain actions. This allows authenticated attackers with Contributor-level access (or hi...