CVE-2026-95514

MediumCVSS 5.3

Published: 23/09/2026(UTC)Updated: 23/09/2026(UTC)Translated: 24/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

14th percentile - higher than 14% of all known CVEs

Summary

The Netgsm plugin in versions up to and including 2.10.0 contains a Bypass vulnerability exploitable by an unauthenticated attacker. The flaw allows bypassing the plugin's control mechanisms.

Risk Assessment

An unauthenticated attacker may bypass the plugin's protections, potentially resulting in unauthorized access to protected functionality.

Recommendation

Update the Netgsm plugin to a version newer than 2.10.0 as soon as a fix becomes available.

Other vulnerabilities in Netgsm

CVE-2025-60143Medium
Missing Authorization vulnerability in the Netgsm WordPress plugin (versions up to and including 2.9.69) allows exploiting incorrectly configured access control security levels.

Original NVD description (English source)

Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS