CyberRota
← Ana sayfaya dön

CVE-2026-11855

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-06T08:16:35.180 · Çekilme zamanı: 2026-07-06T12:08:50.861578+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-11855
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The Simple Membership WordPress plugin before 4.7.5 does not verify the authenticity of Stripe webhook requests when no signing secret is configured, nor escape a value taken from them before outputting it in an administrator notice, allowing unauthenticated attackers to inject arbitrary web scripts that execute in the context of a logged-in administrator.