Description
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| uxper | Civi | ≤ 2.2.4 | — |
Medium · 5.3
CVE-2026-65476
EUVD-2026-48087GHSA-6xf3-hr92-36vc
WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack