Description
Subscriber Broken Access Control in FundEngine <= 1.7.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Roxnor | FundEngine | ≤ 1.7.8 | — |
Medium · 6.5
CVE-2026-59560
EUVD-2026-49227GHSA-7rhf-gp2p-72j6
WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability
Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack