Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

WordPress Tourfic Plugin Broken Access Control Vulnerability Advisory

patchstack.com 2026-07-13 查看中文 →

Security Advisory Medium WordPress

Affected:

WordPress Tourfic <= 2.22.5

Fixed in:

2.22.6

Referenced CVEs: CVE-2026-57395 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from patchstack.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress Phoenix Media Rename Plugin PHP Object Injection RCE (v3.3.5) with POC 2026-10-29 WordPress Ultimate Member Plugin PHP Object Injection (RCE) Advisory & Patch Guide 2026-10-29 WordPress GS Logo Slider v3.8.9 PHP Object Injection (RCE) Advisory & Fix 2026-10-29 WordPress Accordion Plugin PHP Object Injection (RCE) Advisory 2026-10-29 WordPress WP Discussion Board <= 2.6.0 XSS Vulnerability Advisory and Fix Details 2026-10-29

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro