Threats tagged 'ghsa-526w-8v5p-prpw'

CVE-2026-66712 is a high-severity vulnerability in the Simple Membership plugin by wp.insider, affecting versions up to and including 4.7.8. It involves unauthenticated broken access control (CWE-862), allowing unauthorized users to perform actions that should require authorization. The vulnerability has a CVSS score of 7.5, indicating a significant impact on integrity without affecting confidentiality or availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.