webocoders vulnerabilities

Products

• Udimi Tools 1

Latest webocoders CVEs

Newest publication first

1. CVE-2026-7456 Udimi Tools <= 3.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Configuration Reset via 'disconnect' AJAX Action

   Published 2026-08-05

   Medium·CVSS 6.5 EPSS 0.44%

   The Udimi Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_disconnect() function in all versions up to, and including, 3.2. This makes it possible for authenticated attackers, with Subscriber-level access...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.