CVE-2026-16295 in Clearfy Cache Plugin
Сводка
по MITRE • 04.08.2026
The Clearfy Cache WordPress plugin before 2.4.3 does not perform a capability check in one of its admin-page dispatch paths, allowing any authenticated user such as a Subscriber to render admin-only settings pages and disclose their contents, including administrative nonces, while the canonical page URL correctly restricts access.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.