CVE-2026-57661

Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.

Credits

Md. Minaruzzaman Shovon | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/wpcomplete/vulnerability/wordpress-wpcomplete-plugin-2-9-5-5-broken-access-control-vulnerability?_s_id=cve