WP f4-tree <2.0.5 Pre-Auth/Low-Priv RCE: Subscriber Broken Access Control to Modify Post Parent (CVE-2026-9676)

wpscan.com 2026-07-02查看中文 →

Security AdvisoryCVE-2026-9676Mediumf4 Post Tree

Affected:

f4-tree < 2.0.5

Fixed in:

2.0.5

Referenced CVEs: CVE-2026-9676

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress WP 2FA AuthBypass via Passkeys Provider (CVE-2026-15372) 2026-08-05 WordPress Ajax Load More Pre-Auth SQL Injection Vulnerability (CVE-2026-15360) 2026-08-05 YayPricing < 3.5.7 Broken Access Control Allows Pricing Modification and Coupon Disclosure (CVE-2026-15230) 2026-08-05 Login/Signup with Phone Number Plugin Unauthenticated OTP Brute Force Account Takeover (CVE-2026-15210) 2026-08-05 WP Custom HTML Pages <= 0.6.2 Author+ Stored XSS Vulnerability (CVE-2026-16942) 2026-08-05

Offline Archive

Offline screenshot & PDF are Pro-exclusive