Campaign Monitor for WordPress, CVE-2026-0674

CVE, Research URL: CVE-2026-0674
Home page URL: Security reports for Campaign Monitor for WordPress
Application: Campaign Monitor for WordPress
Published on: Jan 08, 2026
Research Description: Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress forms-for-campaign-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Campaign Monitor for WordPress: from n/a through <= 2.9.0.
Affected versions: max 2.9.0.
Status: vulnerable