CyberSecBulletin

Lenxel WP vulnerabilities

We track 1 vulnerability in Lenxel WP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 2, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Lenxel WP vulnerabilities

  • 8.1 High severity

    Lenxel WP: Improper Authentication

    CVE-2026-12586Lenxel WP

    The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including an administrator) and