CVE-2026-0554

creationtimestamp| type| source ---|---|--- 2026-01-20 15:49:18+00:00| seen| https://gist.github.com/Darkcrai86/ba7f46b266a6527f09cff4489f04187a 2026-01-20 17:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcun2mmobm2g...

CVE-2026-0554

The NotificationX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'regenerate' and 'reset' REST API endpoints in all versions up to, and including, 3.1.11. This makes it possible for authenticated attackers, with Contributor-level...