Medium 4.3 Unfixed
2025-04-04≤ 2.6.3
WordPress Variable Inspector plugin <= 2.6.3 - Broken Access Control vulnerability
Minimum safe version
2.6.3
Update to 2.6.3 or later to address 2 fixable vulnerabilities
WordPress Variable Inspector plugin <= 2.6.3 - Broken Access Control vulnerability
CVE-2025-26914
WordPress Variable Inspector Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)