Description

An improper access check allows unauthorized access to com_config webservice endpoints.

Remediation

References

CVE-2026-35223

Related Vulnerabilities

WordPress Plugin Auto Prune Posts Cross-Site Request Forgery (1.8.0)

WordPress Plugin Transposh WordPress Translation Cross-Site Scripting (0.8.3)

WordPress Plugin Supafolio Multiple Unspecified Vulnerabilities (2.1.0)

WordPress Plugin Facebook Promotion Generator for WordPress 'fbActivate.php' SQL Injection (1.3.3)

WordPress Plugin FluentAuth-The Ultimate Authorization & Security for WordPress Security Bypass (1.0.1)

Severity

Critical

Classification

CVE-2026-35223 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities