CVE-2026-11882
Builderall for WordPress < 3.0.2 - Unauthenticated OAuth Access Token Poisoning via Public REST Routes
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthenticated attackers to complete the connection flow and overwrite the stored third-party integration access token. A durable overwrite requires the site to already be connected to a paid account.
| Vendor | unknown |
| Product | builderall for wordpress |
| Published | Aug 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown builderall for wordpress
Be the first to know when new unknown vulnerabilities affecting unknown builderall for wordpress are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Builderall for WordPress
0 < 3.0.2
References
Credits
Pablo González and Fran Ramírez WPScan