Skip to content
Sign in
5.3 Medium

CVE-2026-88931 The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through…

Description

The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints.

Affected products and versions

Product Affected versions Fixed in
Social Web Suite 4.1 earliest → 4.1.12 No fix stated

Other CVEs of Social Web Suite

The 2 CVEs of Social Web Suite →
CVE-2026-88930 The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting… 8.6 High
Track this CVE