CVE-2026-25431

MEDIUM NVD

CVSS Score 5.3

Severity MEDIUM

Published May 12, 2026

Vendor unknown

Description

Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hustle: through 7.8.10.1.

References

https://patchstack.com/database/wordpress/plugin/wordpress-popup/vulnerability/wordpress-hustle-plugin-7-8-10-1-broken-access-control-vulnerability?_s_id=cve