CVE-2026-8787

The Firebase Support & Chat Management plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.1.1. This is due to the `firebase_auth()` function authenticating the request as the WordPress user whose email is supplied in the `user_email` POST parameter without verifying ownership of that email (no Firebase ID token signature/issuer/audience verification). This makes it possible for authenticated attackers, with Subscriber-level access and above, to log in as an arbitrary existing user — including an Administrator — by submitting that user's email address to the `acb_firebase_auth` AJAX action, resulting in full account takeover.

• CWE-269

• https://plugins.trac.wordpress.org/browser/admin-chat-box/tags/3.1.1/inc/ACB_AjaxHandler.php#L237
• https://plugins.trac.wordpress.org/browser/admin-chat-box/tags/3.1.1/inc/ACB_AjaxHandler.php#L338
• https://plugins.trac.wordpress.org/browser/admin-chat-box/trunk/inc/ACB_AjaxHandler.php#L237
• https://plugins.trac.wordpress.org/browser/admin-chat-box/trunk/inc/ACB_AjaxHandler.php#L338
• https://www.wordfence.com/threat-intel/vulnerabilities/id/90783d75-a255-4133-ac7b-32e0a70c8c69?source=cve

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8781A security flaw has been discovered in omec-project amf up t…4.3
• CVE-2026-8782A weakness has been identified in omec-project amf up to 2.1…4.3
• CVE-2026-8783A security vulnerability has been detected in omec-project a…4.3
• CVE-2026-8784A vulnerability was detected in npitre cramfs-tools up to 2.…4.2
• CVE-2026-8785A flaw has been found in projectworlds hospital-management-s…7.3
• CVE-2026-8786A vulnerability has been found in Tencent WeKnora up to 0.3.…6.3
• CVE-2026-8788Net::Statsd::Lite versions through 0.10.0 for Perl allowed m…7.3
• CVE-2026-8789The Easy Appointments plugin for WordPress is vulnerable to …8.1
• CVE-2026-8790The Football Pool plugin for WordPress is vulnerable to Refl…6.1
• CVE-2026-8791The Booking System Trafft plugin for WordPress is vulnerable…6.4
• CVE-2026-8793PaperCut NG/MF does not properly restrict excessive authenti…6.9
• CVE-2026-8794PaperCut NG/MF contains an observable timing discrepancy in …6.9