CVE-2026-100145 | Synchrony Financing Plugin up to 1.1.1 on WordPress REST Routes authorization

October 21, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Synchrony Financing Plugin up to 1.1.1 on WordPress. This impacts an unknown function of the component REST Routes. The manipulation leads to incorrect authorization.

This vulnerability is referenced as CVE-2026-100145. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More