CVE WATCH / VULNERABILITY DETAIL
CVE-2026-119745
MEDIUMCVSS 4.3NVD feed
Published 4 November 2026 · tracked since 5 November 2026
Description
Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to access a sensitive diagnostic dump by requesting the admin_post_sender_debug_download action handled by downloadDebugFile() without any capability, n
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-54372 HIGH 8.8
- CVE-2026-121751 LOW 3.1
- CVE-2026-121746 MEDIUM 5.5
- CVE-2026-121747 MEDIUM 5.5
- CVE-2026-121748 LOW 3.6
- CVE-2026-121749 LOW 3.3
- CVE-2026-121750 LOW 3.1
- CVE-2026-121745 LOW 2.5
- CVE-2026-103002 HIGH 8.8
- CVE-2026-102280