CVE-2026-84757

HighCVSS 8.2/10Last modified Sep 3, 2026

Description

Unauthenticated Settings Change in WP Compress <= 7.21.28 versions.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Sep 3, 2026
Last modified
Sep 3, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-847586.5Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.CVE-2026-847597.1Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions.CVE-2026-84769.9IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDCVE-2026-847605.3Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce <= 3.2.9 versions.CVE-2026-847617.2Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.CVE-2026-847625.3Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions.CVE-2026-847637.1Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.CVE-2026-847648.8Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions.CVE-2026-847657.1Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.CVE-2026-847665.9Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.CVE-2026-847675.3Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.CVE-2026-847689.3Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.
CVE-2026-84757: High severity, CVSS 8.2 | Vulnix