Authorization Bypass in 4Dem Email Marketing Plugin for WordPress
CVE-2026-105984
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 14 November 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-105984?
The 4Dem Email Marketing plugin for WordPress prior to version 2.0.5 is vulnerable due to the lack of proper authorization checks on several AJAX actions. This flaw enables unauthorized users to manipulate the plugin’s stored configuration and delete important records, which can lead to significant data loss and compromise the integrity of email marketing campaigns.
Affected Version(s)
Email Marketing 4Dem 0 <= 2.0.5
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.