Authorization Flaw in Email Marketing Plugin for WordPress by 4Dem
CVE-2026-105983
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 14 November 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-105983?
The Email Marketing 4Dem plugin for WordPress, up to version 2.0.5, contains a significant authorization vulnerability. It fails to properly validate user permissions on multiple AJAX actions and REST routes. This oversight allows unauthenticated users to access sensitive configurations and data stored within the plugin, leading to potential exposure of user settings and unauthorized modifications. The vulnerability emphasizes the need for robust security measures in plugin development to protect user data.
Affected Version(s)
Email Marketing 4Dem 0 <= 2.0.5
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.