cbcvebase.

Newscred Welcome Software Publishing vulnerabilities

1 known vulnerability affecting newscred/welcome_software_publishing.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-4297P2HIGHCVSS 8.8≤ 0.0.312026-06-24
CVE-2026-4297 [HIGH] CWE-862 CVE-2026-4297: The Welcome Software Publishing plugin for WordPress is vulnerable to Arbitrary Options Update in al The Welcome Software Publishing plugin for WordPress is vulnerable to Arbitrary Options Update in all versions up to and including 0.0.31. This is due to a missing capability check in the nc_setOption() function, which is exposed via the nc.setOption XML-RPC method. The function authenticates the user via $wp_xmlrpc_server->login() (verifying credential
nvd
Newscred Welcome Software Publishing vulnerabilities | cvebase