CVE-2026-16295 in Clearfy Cache Plugin
要約
〜によって MITRE • 2026年08月04日
The Clearfy Cache WordPress plugin before 2.4.3 does not perform a capability check in one of its admin-page dispatch paths, allowing any authenticated user such as a Subscriber to render admin-only settings pages and disclose their contents, including administrative nonces, while the canonical page URL correctly restricts access.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.