UNKNOWN NVD

CVE-2026-109931

The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce check on an AJAX action available to unauthenticated users, allo

The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce check on an AJAX action available to unauthenticated users, allowing any visitor to overwrite a machine-translation configuration value belonging to a companion Infility Global WordPress plugin before 2.16.25.

References

https://wpscan.com/vulnerability/2d730144-fc13-4921-aa2f-1e0233b0a196/

Published: 2026-10-22 · Source: NVD · Feed updated: 2026-10-22

This unknown severity vulnerability was published on 2026-10-22 via NVD.

vulnfeed aggregates 17329 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.