CVE-2026-77010 | HEL Online Classroom Plugin up to 1.0.3 on WordPress REST API Routes access control

August 29, 2026 Yanac

A vulnerability was found in HEL Online Classroom Plugin up to 1.0.3 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component REST API Routes. The manipulation results in improper access controls.

This vulnerability is known as CVE-2026-77010. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More