CVE-2026-77008
HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing unauthenticated users to overwrite them and repoint every online classroom, along with the shared secret those sessions are signed with, at infrastructure of their choosing.
| Vendor | unknown |
| Product | hel online classroom: ai-powered online classrooms |
| Published | Aug 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown hel online classroom: ai-powered online classrooms
Be the first to know when new unknown vulnerabilities affecting unknown hel online classroom: ai-powered online classrooms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / HEL Online Classroom: AI-powered Online Classrooms
0 ≤ 1.0.3
References
Credits
kimsunghoon WPScan