Skip to content
OpenAdvisories
High · 7.5 CVE-2025-69394 EUVD-2025-207969GHSA-crh6-h7h3-f48v

WordPress Cnvrse plugin < 026.02.10.20 - Insecure Direct Object References (IDOR) vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in cnvrse Cnvrse cnvrse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cnvrse: from n/a through < 026.02.10.20.

Affected products

VendorProductAffectedFixed
cnvrse Cnvrse ≤ 026.02.10.20 —

References