WP Module Data vulnerabilities

1 known vulnerability in WP Module Data from Newfold. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WP Plugin Web: Improper Authentication

  CVE-2026-80099Sep 9, 2026NewfoldEPSS 2.91%

  Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the `authenticate()` method — registered on the `rest_authentication_errors` filter and therefore eva