CyberRota
← Ana sayfaya dön

CVE-2026-11882

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-08-01T07:16:28.687 · Çekilme zamanı: 2026-08-01T12:06:04.524901+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-11882
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthenticated attackers to complete the connection flow and overwrite the stored third-party integration access token. A durable overwrite requires the site to already be connected to a paid account.