CVE-2026-89300

Name of the Vulnerable Software and Affected Versions WP Verify API WordPress plugin version 1.0.0

Description An authorization check is missing in a REST route, which allows unauthenticated users to insert arbitrary data into the plugin database table. Additionally, this flaw enables the site to send templated verification emails to any specified email address. The affected route lacks rate limiting, which could facilitate automated abuse.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.