Beveiligingsadvies

CVE-2026-87828

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 06:00:16
Laatst bijgewerkt 2026-09-16 06:00:16
Toegewezen door WPScan
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire admin area inaccessible to all administrators (denial of service).