CVE-2026-18317 | Foxtheme Foxtool All-in-One Contact chat button up to 2.5.3 on WordPress Settings Authorization media-up3 authorization

A vulnerability classified as problematic was found in Foxtheme Foxtool All-in-One Contact chat button, Custom login and Media optimize images Plugin up to 2.5.3 on WordPress. Affected by this issue is some unknown functionality of the component Settings Authorization. Executing a manipulation of the argument media-up3 can lead to authorization bypass.

This vulnerability is handled as CVE-2026-18317. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More