CVE-2026-9289 | WordLift Plugin up to 3.54.10 on WordPress JSON-LD REST API /wordlift/v1/jsonld get_post access control

September 19, 2026 Yanac

A vulnerability was found in WordLift Plugin up to 3.54.10 on WordPress. It has been classified as problematic. The impacted element is the function get_post of the file /wordlift/v1/jsonld of the component JSON-LD REST API. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-9289. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More