Skip to content
Sign in
5.3 Medium

CVE-2026-77013 The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may…

Description

The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and performs no capability or nonce check on them, allowing unauthenticated users to create WordPress user accounts and taxonomy terms.

Affected products and versions

Product Affected versions Fixed in
爱采集数据采集和发布插件 1.0 earliest → 1.0.0 No fix stated

Other CVEs of 爱采集数据采集和发布插件

The 2 CVEs of 爱采集数据采集和发布插件 →
CVE-2026-77012 The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its… 9.3 Critical
Track this CVE