CVE-2026-78259

HighCVSS 7.3/10Last modified Oct 12, 2026

Description

Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-288

Affected software

No affected versions have been published.

Timeline

Published
Aug 24, 2026
Last modified
Oct 12, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-78269.1A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 CVE-2026-782609.3Unauthenticated SQL Injection in Epayco <= 8.4.6 versions.CVE-2026-782617.1Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.CVE-2026-782629.8Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.CVE-2026-782637.1Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.CVE-2026-782647.1Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions.CVE-2026-782659.8Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.CVE-2026-782666.5Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.CVE-2026-782679.8Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.CVE-2026-782687.5Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget &amp; AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLCVE-2026-782696.4Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions.CVE-2026-78278.1A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c)
CVE-2026-78259: High severity, CVSS 7.3 | Vulnix