WP-CORS, CVE-2026-25410

CVE, Research URL: CVE-2026-25410
Home page URL: Security reports for WP-CORS
Application: WP-CORS
Published on: Feb 19, 2026
Research Description: Missing Authorization vulnerability in tstephenson WP-CORS wp-cors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CORS: from n/a through <= 0.2.2.
Affected versions: max 0.2.2.
Status: vulnerable