CVE-2026-78259

WPLegalPages versions up to 3.7.0 are vulnerable to unauthenticated broken authentication, allowing attackers to exploit this weakness to gain unauthorized access to sensitive functionalities. The impact could lead to unauthorized actions being performed on behalf of legitimate users, compromising the integrity of the application. Organizations using affected versions should prioritize patching this vulnerability to mitigate potential security breaches.