LIVE GLOBAL MONITOR: 1 JURISDICTION ACTIVE

Oct 19, 2026 · 17:40 UTC SEARCH

HACKCURRENT Cybersecurity Intelligence

MEDIUM

Vulnerability intelligence

CVE-2026-81279

Published September 3, 2026

CVSS 3.15.4

SeverityMedium

Known exploitedNo

Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions.

NVD references:

https://patchstack.com/database/wordpress/plugin/push-notification-for-post-and-buddypress/vulnerability/wordpress-push-notification-for-post-and-buddypress-plugin-3-20-broken-access-control-vulnerability?_s_id=cve

Primary source: NIST National Vulnerability Database