CVE-2026-65476MEDIUM NVDCVSS Score 5.3Severity MEDIUMPublished Jul 23, 2026Vendor unknownDescriptionUnauthenticated Broken Access Control in Civi <= 2.2.4 versions.Referenceshttps://patchstack.com/database/wordpress/theme/civi/vulnerability/wordpress-civi-theme-2-2-4-broken-access-control-vulnerability?_s_id=cve