CyberRota
← Ana sayfaya dön

CVE-2026-12690

LOW · CVSS 3.8 EPSS %0.13

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-24T07:16:32.680 · Çekilme zamanı: 2026-07-25T06:06:28.708633+00:00

CyberRota Yorumu

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-12690
Severity
LOW
CVSS
3.8
EPSS
%0.13
WordPress

Orijinal NVD Açıklaması

The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its license management actions, relying only on a nonce that is exposed to any logged-in user, allowing authenticated users with Subscriber-level access and above to overwrite the site's premium license settings.