Critical severity9.8NVD Advisory· Published Sep 17, 2026· Updated Sep 17, 2026
CVE-2026-86707
CVE-2026-86707
Description
The Private Feed Key WordPress plugin through 0.1 does not verify that the key used to authenticate a feed request is one it issued, matching any stored user metadata value instead, which allows unauthenticated attackers to log in as any user, including administrators.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=0.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.