Description
Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wappointment team | Wappointment | ≤ 2.7.7 | — |
Medium · 6.5
CVE-2026-39756
EUVD-2026-93265GHSA-p65h-4xv9-c744
WordPress Wappointment plugin <= 2.7.7 - Insecure Direct Object References (IDOR) vulnerability
Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack