Description
Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Maruti Mohanty | WP Social Avatar | ≤ 1.5 | — |
Medium · 6.5
CVE-2026-66454
EUVD-2026-57874GHSA-h6x8-fqgh-vwfq
WordPress WP Social Avatar plugin <= 1.5 - Broken Access Control vulnerability
Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack