CVE-2026-101301
Last modified
CVE-2026-101301 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing unauthenticated visitors to disable all of the site's automatically inserted snippets for their own requests..
Description
The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing unauthenticated visitors to disable all of the site's automatically inserted snippets for their own requests.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Unknown | WPCode | >= 2.0.0, < 2.4.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-101301?
How severe is CVE-2026-101301?
How do I fix CVE-2026-101301?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-101292Apache ActiveMQ Artemis before 2.34.0 contains an unsafe ref…8.2
- CVE-2026-101294IBM WebSphere Application Server - Liberty 17.0.0.3 through …8.7
- CVE-2026-101295Path traversal / arbitrary file write in oc-mirror's operato…7.3
- CVE-2026-101296A missing critical step in authentication vulnerability in A…9.1
- CVE-2026-10130QueryWeaver contains an authentication bypass vulnerability …8.8
- CVE-2026-101300Server-Side Request Forgery (SSRF) reported in the ticket sa…7.1
- CVE-2026-101302TLS 1.3 embeds the actual record type as the last non-zero b…6.5
- CVE-2026-101303The IPv6 UDP send path for unconnected sockets did not apply…7.5
- CVE-2026-101304When fdescfs(4) was mounted in a jail with the "nodup" optio…7.1
- CVE-2026-101305renameat(2) did not enforce FD_RESOLVE_BENEATH on its direct…8.8
- CVE-2026-101306SCM_RIGHTS file descriptor passing did not preserve FD_RESOL…9.8
- CVE-2026-101307When the PCM sample array needs to grow, the RACK stack doub…9.1
Are you affected by CVE-2026-101301?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST