TI-2026-06553 CVE-2026-7456 · GHSA-fjcf-648f-mmhxMissing authorization in webocoders Udimi ToolsPriority LOW 29The Udimi Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_disconnect()` function in all versions up to, and including, 3.2.CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0044 · Published 2026-08-05 · No fix listed CWE-862