MeldSecurity
Press Enter to search
CVE Database & Search →
Sign In Get Started

CVE-2026-2215

🟢 LOW

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the...

Published
Feb 09, 2026
Last Modified
Feb 09, 2026
Views
36
Bookmarks
0

Description

Request Expert Review

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRET_KEY results in use of default cryptographic key. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit is now public and may be used.

CVSS Scores

CVSS 3.1 3.7
3.7
LOW
CVSS 2.0 3.7

References

vuldb.com vuldb.com vuldb.com www.notion.so

Additional Information

Source
cna@vuldb.com
State
Awaiting analysis

Related CVEs

CVE-2026-3523

MEDIUM

The Apocalypse Meow plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 22.1.0. This is...

Score: 4.9

CVE-2026-3034

MEDIUM

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _ob_spacerat_link, _ob_bbad_link, and _ob...

Score: 6.4

CVE-2026-2899

MEDIUM

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.1.17. This is due...

Score: 6.5

CVE-2026-2365

HIGH

The Fluent Forms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `fluentform_step_form_save_data` AJAX action in all ver...

Score: 7.2

CVE-2026-26034

HIGH

UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an atta...

Score: 7.8

CVE-2026-26033

MEDIUM

UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a u...

Score: 6.7

Share CVE-2026-2215

Share on Social Media

Copy Link

Embed Code

Request Expert Analysis

Request a professional security analysis for CVE-2026-2215 from our verified experts.

Credits System

Use your credits to get expert analysis from verified security professionals. Purchase more credits anytime!

Add 3 credits for accelerated delivery

Base Cost: 8 credits
Priority Upgrade: + credits
SLA Acceleration: +3 credits
Total Cost:
Your Balance:

Insufficient Credits

You need more credits to submit this request.

Buy Credits

Report Analysis