Skip to content
OpenAdvisories

Vendor

Newfold

1 known vulnerabilities.

Products

WP Plugin Web 1 WP Plugin Crazy Domains 1 WP Module Data 1 WP Plugin Hostgator 1 WP Plugin Bluehost 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-80099 Public exploit

    Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret

    Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the `authenticate()` method — registered on the `rest_authentication_errors` filter and therefore ev…

    Newfold WP Plugin Crazy Domains WP Plugin Hostgator WP Plugin Web