TI-2026-28581 CVE-2026-39610 · GHSA-qr82-4rg7-7243
WordPress WpXmas-Snow plugin <= 1.1 - Broken Access Control vulnerability
Priority LOW 29
Missing Authorization vulnerability in Pankaj Kumar WpXmas-Snow wpxmas-snow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpXmas-Snow: from n/a through <= 1.1.