Access Control Weakness in WPMU DEV Hustle Plugin

CVE-2026-25431

What is CVE-2026-25431?

The Hustle plugin developed by WPMU DEV contains a missing authorization vulnerability that allows attackers to exploit incorrectly configured access controls. This issue enables unauthorized access to sensitive functionalities within the plugin, potentially leading to further security breaches. Users of Hustle are advised to review their access control configurations and apply any security patches provided by the vendor to mitigate risks.

References