CVE-2026-32549

Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.

Credits

20kilograma | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/image-sizes/vulnerability/wordpress-thumbpress-plugin-6-5-broken-access-control-vulnerability?_s_id=cve