Compe

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-40737 Apr 15, 10:21 MEDIUM This Month

Unauthorized data access in VillaTheme COMPE WordPress plugin versions ≤1.1.4 allows remote attackers to retrieve sensitive information by manipulating user-controlled keys. The vulnerability (CWE-639) is trivially exploitable over the network with no authentication, but impact is limited to confidential data exposure. No active exploitation or public exploit is currently known.

WordPress Authentication Bypass Compe Wordpress Plugin Villatheme

NVD

CVSS 3.1

5.3

EPSS

0.0%

CVE-2026-40737

EPSS 0% CVSS 5.3

MEDIUM This Month

Unauthorized data access in VillaTheme COMPE WordPress plugin versions ≤1.1.4 allows remote attackers to retrieve sensitive information by manipulating user-controlled keys. The vulnerability (CWE-639) is trivially exploitable over the network with no authentication, but impact is limited to confidential data exposure. No active exploitation or public exploit is currently known.

WordPress Authentication Bypass Compe +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy