CVE-2026-88795

The wpShopGermany IT-RECHT KANZLEI WordPress plugin (before 2.4 ) generates its API authentication token from data the requester controls, creating it as a side effect of the very check meant to validate it. This allows unauthenticated attackers to predict the token, write arbitrary files, and ac...