CVE Catalog
CVE-2026-81279
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.22%
12th percentile - higher than 12% of all known CVEs
Summary
The Push Notification for Post and BuddyPress plugin version 3.20 and earlier has a Subscriber Broken Access Control vulnerability. This means a user with the subscriber role can gain unauthorized access to functions they should not have permissions for.
Risk Assessment
Subscribers may perform administrative operations or modify settings, potentially leading to data integrity issues and privilege escalation.
Recommendation
Update the plugin to the latest version with security fixes and review user permissions.
Other vulnerabilities in Push Notification for Post and BuddyPress
Original NVD description (English source)
Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS