Wpxmas Snow

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-39610 Apr 08, 08:30 MEDIUM This Month

Missing authorization in WpXmas-Snow WordPress plugin up to version 1.1 allows unauthenticated remote attackers to modify plugin content through incorrectly configured access control, resulting in unauthorized data integrity violations without requiring authentication or user interaction.

WordPress Authentication Bypass Wpxmas Snow Wordpress Plugin

NVD

CVSS 3.1

5.3

EPSS

0.0%

CVE-2026-39610

EPSS 0% CVSS 5.3

MEDIUM This Month

Missing authorization in WpXmas-Snow WordPress plugin up to version 1.1 allows unauthenticated remote attackers to modify plugin content through incorrectly configured access control, resulting in unauthorized data integrity violations without requiring authentication or user interaction.

WordPress Authentication Bypass Wpxmas Snow +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy