CVE-2026-102915

Marco van Wieren WPO365

Published 6 Oct 2026 · updated 6 Oct 2026 · Received

8.5 High · CVSS 3.1, patchstack.com

Description

Subscriber Broken Access Control in WPO365 <= 44.1 versions.

References

patchstack.com/database/wordpress/plugin/wpo365-login/vulnerability/wordpress-wpo365-plugin-44-1-broken-access-control-vulnerability?_s_id=cve