CVE-2026-88931 — Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update

CVE-2026-88931

Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update PUBLISHED

Description (CNA)

The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints.

Affected (CNA)

Vendor / product	Versions
Unknown / Social Web Suite	affected 0 through 4.1.12

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e1341110-abad-47f5-aed5-1c06cb0c8071/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.