Skip to content
Threat Feed
Subscribe

Product

Wp-Module-Data (<= 2.9.4)

1 brief RSS
high advisory

Authentication Bypass in Newfold WordPress Plugins via wp-module-data

An authentication bypass vulnerability in the wp-module-data library used by multiple Newfold plugins allows unauthenticated attackers to forge administrative access tokens and take over WordPress sites.

Crazy Domains +4 web-application-vulnerability wordpress cve-2026-80099
1r 1t 1c