SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-81801

HIGH · CVSS 8.1 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-09-10 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

Versions of WP-Stateless up to 4.4.1 are vulnerable due to a flaw in the Subscriber Settings Change feature, which could allow unauthorized users to modify critical settings. This vulnerability poses a high risk as it could lead to unauthorized access and manipulation of subscriber data, impacting the integrity and security of the application. Organizations using affected versions should prioritize patching to mitigate potential exploitation.

CVE
CVE-2026-81801
Severity
HIGH
CVSS
8.1
EPSS
0.31%

Original NVD Description

Subscriber Settings Change in WP-Stateless <= 4.4.1 versions.