CVE-2026-14805 | Stylemixmes Consulting Plugin up to 6.7.16 on WordPress Developer Access Login STMHandler.php transient_key/stm_developer_access_token privileges management

A vulnerability marked as critical has been reported in Stylemixmes Consulting Plugin up to 6.7.16 on WordPress. The impacted element is an unknown function of the file admin/admin-notices/classes/STMHandler.php of the component Developer Access Login. This manipulation of the argument transient_key/stm_developer_access_token causes improper privilege management.

This vulnerability is handled as CVE-2026-14805. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More