Beveiligingsadvies

CVE-2026-2688

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-02 14:16:47

Laatst bijgewerkt 2026-09-02 14:57:38

Toegewezen door WPScan

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The HIPAA FORMS WordPress plugin before 3.2.0 contains a hardcoded authentication bypass via a hardcoded parameter alongside all AJAX requests. The server explicitly checks for this value to skip nonce validation entirely. This allows unauthenticated attackers to access protected AJAX endpoints.

← Alle CVE's bekijken Bekijk op cve.org ↗