WordPress Builderall Pre-Auth OAuth Token Poisoning (CVE-2026-11882)

wpscan.com 2026-08-01查看中文 →

Security AdvisoryCVE-2026-11882LowBuilderall for WordPress

Affected:

Builderall for WordPress < 3.0.2

Fixed in:

3.0.2

Referenced CVEs: CVE-2026-11882

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

InfiniteWP Client Unauthenticated Admin Takeover (CVE-2026-15038) 2026-08-09 GeoDirectory <2.8.169 Unauthenticated Sensitive Data Disclosure Vulnerability 2026-08-09 Solace Extra < 1.6.1 Missing Authorization Allows Arbitrary Post Meta Update 2026-08-09 LWS Optimize < 4.1.2 Unauthenticated Stored XSS Vulnerability (CVE-2026-16032) 2026-08-09 Slim SEO < 4.9.11 Contributor+ Arbitrary Post Meta Disclosure (IDOR/CVE-2026-16957) 2026-08-09

Offline Archive

Offline screenshot & PDF are Pro-exclusive