Beveiligingsadvies

CVE-2026-77008

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-29 06:00:22

Laatst bijgewerkt 2026-08-30 00:56:51

Toegewezen door WPScan

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing unauthenticated users to overwrite them and repoint every online classroom, along with the shared secret those sessions are signed with, at infrastructure of their choosing.

← Alle CVE's bekijken Bekijk op cve.org ↗