CVE-2026-86801 | To Do List Member Plugin up to 1.6 on WordPress File Upload Endpoint missing authentication

September 17, 2026 Yanac

A vulnerability classified as critical was found in To Do List Member Plugin up to 1.6 on WordPress. The impacted element is an unknown function of the component File Upload Endpoint. Executing a manipulation can lead to missing authentication.

This vulnerability is handled as CVE-2026-86801. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More