PT-2026-108745

Name of the Vulnerable Software and Affected Versions The Social Web Suite WordPress plugin versions prior to 4.1.13 Description The plugin fails to restrict which settings can be modified via an unauthenticated endpoint. This allows an attacker to overwrite arbitrary options, including the share...

CVE-2026-85004 Popup Maker WP <= 1.4.5 - Subscriber+ Missing Authorization via sgpm_connect

The Popup Maker WordPress plugin through 1.4.5 does not perform a capability check on one of its account-connection actions, only verifying a nonce, allowing authenticated users with minimal privileges such as Subscribers to overwrite a site-wide Popup Maker WordPress plugin through 1.4.5 option...

CVE-2023-5098: Undefined Security Weakness

The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges like subscribers from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS...