CVE-2026-12981
Vulnerability Description
The CAFEHAUS API WordPress plugin through 1.0.0 does not have any authentication or authorisation when updating user passwords, allowing unauthenticated attackers to set the password of any user, including administrators, and fully take over their accounts.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Unknown
Product
CAFEHAUS API
Discussion (0)
Add Comment
No comments yet. Be the first!