WP Component vulnerabilities
We track 1 vulnerability in WP Component products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest WP Component vulnerabilities
- 9.8 Critical severity
WP Component: Improper Privilege Management
The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated at