Description
Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| uxper | Civi Framework | ≤ 2.2.0 | — |
Medium · 5.3
CVE-2026-65525
EUVD-2026-48126GHSA-c2v9-7ff7-q3p4
WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack