SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81279

MEDIUM · CVSS 5.4 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-08-27 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects the Push Notification feature in Post and BuddyPress versions up to 3.20, where improper access controls may allow unauthorized users to access sensitive subscriber information. This could lead to data exposure or manipulation, impacting user privacy and security. Organizations using these versions should prioritize remediation to safeguard against potential data breaches.

CVE
CVE-2026-81279
Severity
MEDIUM
CVSS
5.4
EPSS
0.22%

Original NVD Description

Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions.