CyberRota
← Ana sayfaya dön

CVE-2026-12688

MEDIUM · CVSS 6.5 EPSS %0.14

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-24T07:16:32.473 · Çekilme zamanı: 2026-07-25T06:06:28.633288+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-12688
Severity
MEDIUM
CVSS
6.5
EPSS
%0.14
WordPress

Orijinal NVD Açıklaması

The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before granting paid group membership, allowing unauthenticated attackers to forge a payment notification and mark any user as a paid member of any group without any payment being made.