PT-2026-6011

CVE-2026-0572

Published

2026-02-03

Updated

2026-02-04

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions WebPurify Profanity Filter versions up to and including 4.0.2

Description The WebPurify Profanity Filter plugin for WordPress has a flaw that allows unauthorized modification of data. This is due to a missing capability check on the webpurify save options function. Unauthenticated attackers can exploit this to change plugin settings.

Recommendations Update WebPurify Profanity Filter to a version later than 4.0.2.

Exploitability

Fix

Impacts

Researchers

Bhumividh Treloges

Webpurify

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers