CVE-2026-39673 WordPress iZooto plugin <= 3.7.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in shrikantkale iZooto izooto-web-push allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iZooto: from n/a through = 3.7.20...

CVE-2026-39673

CVE-2026-39673 is a missing authorization / broken access control vulnerability affecting the WordPress plugin izooto-web-push (iZooto) up to version

WordPress plugin iZooto 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...