CVE-2026-39756

Wappointment team Wappointment

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

6.5 Medium · CVSS 3.1, patchstack.com

Description

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.

References

patchstack.com/database/wordpress/plugin/wappointment/vulnerability/wordpress-wappointment-plugin-2-7-7-insecure-direct-object-references-idor-vulnerability?_s_id=cve