CVE-2026-9616
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
The Generate Security.txt plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.0.12. This is due to the plugin not properly verifying that a user is authorized to perform an action, allowing authenticated attackers with subscriber-level access and above to delete the site's security.txt file or create the .well-known directory.
Risk Assessment
Attackers can delete critical security files or alter directory structures, potentially leading to serious security vulnerabilities for the site. This poses a risk to the integrity and security of data on the server.
Recommendation
It is recommended to update the Generate Security.txt plugin to the latest version to mitigate this vulnerability. Additionally, conducting a user permission audit and monitoring actions related to security files is advisable.
Original NVD description (English source)
The Generate Security.txt plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.12. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete the site's security.txt file from the server filesystem or create the .well-known directory by directly invoking the delete_securitytxt or create_wellknown_folder AJAX actions.