CVE-2026-22487

CVE-2026-22487 describes a Missing Authorization vulnerability in Speed Kit affecting Speed Kit versions from n/a up to 2.0.2. The issue arises from incorrect access control configuration, allowing an unauthenticated actor to reach restricted functionality. CVSSv3.1/3.1 base metrics show a Medium...

CVE-2026-22487 WordPress Speed Kit plugin <= 2.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in baqend Speed Kit baqend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Speed Kit: from n/a through = 2.0.2...

WordPress Speed Kit plugin <= 2.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Speed Kit versions = 2.0.2...