CVE-2026-80099P1HIGHCVSS 8.8ExploitedPoC≤ 2.9.72026-09-09
CVE-2026-80099 [HIGH] CWE-287 CVE-2026-80099: Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because th
Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the `authenticate()` method — registered on the `rest_authentication_errors` filter and therefore evaluated for every unauthenticated REST API request — performs an HMAC-style Bearer token compa
nvd