CVE-2026-73994

HighCVSS 7.5

Published: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

Unauthenticated Broken Access Control vulnerability in Charitable versions up to 1.8.11.3.

An attacker without authentication can gain unauthorized access to administrative functions, potentially leading to data integrity compromise.

Update the Charitable plugin to the latest available version that includes the security fix.

Original NVD description (English source)

Unauthenticated Broken Access Control in Charitable <= 1.8.11.3 versions.