Abilities Bridge vulnerabilities
We track 1 vulnerability in Abilities Bridge products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Abilities Bridge vulnerabilities
- 8.8 High severity
Abilities Bridge: Cross-Site Request Forgery
The Abilities Bridge WordPress plugin before 1.4.2 does not require a valid nonce before re-authenticating a REST API request from the logged-in session cookie, allowing attackers to make a logged-in administrator perform any REST API action, including creatin