CVE-2026-77013

The 爱采集数据采集和发布插件 for WordPress, up to version 1.0.0, is vulnerable due to insufficient restrictions on handler methods, enabling unauthenticated users to create WordPress user accounts and taxonomy terms without proper checks. This flaw poses a significant risk of unauthorized access and potential account takeover. WordPress site administrators using this plugin should prioritize immediate updates or remediation to mitigate the risk.