Skip to content
Sign in
4.3 Medium

CVE-2026-18364 The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX…

Description

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals WordPress plugin before 6.4.2's stored integration settings.

Affected products and versions

Product Affected versions Fixed in
zportals 6.4 earliest → < 6.4.2 6.4.2

Other CVEs of zportals

The 3 CVEs of zportals →
CVE-2026-18365 The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions,… 4.3 Medium CVE-2026-14553 The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied… 8.1 High
Track this CVE