Vulnerabilities

TI-2026-63995 CVE-2026-97258 · GHSA-36mf-ffjg-fq9v

WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability

LOW 29

Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00326 Published 2026-10-01 No fix listed CWE-862

TI-2026-19078 CVE-2026-23694 · GHSA-7mg3-vfc7-xvch

Aruba HiSpeed Cache < 3.0.5 CSRF in Multiple Administrative AJAX Actions

LOW 25

Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple administrative AJAX actions.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00254 Published 2026-02-23 Fixed in 3.0.5 CWE-352

TI-2024-28790 CVE-2024-43119 · GHSA-5wpm-qc6v-h654

WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability

LOW 21

Missing Authorization vulnerability in Aruba.It Aruba HiSpeed Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aruba HiSpeed Cache: from n/a through 2.0.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00493 Published 2024-11-01 No fix listed CWE-862

Vulnerabilities

Filters

WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability

Aruba HiSpeed Cache < 3.0.5 CSRF in Multiple Administrative AJAX Actions

WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability