CVE-2026-59560

Subscriber Broken Access Control in FundEngine <= 1.7.8 versions.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - audit@patchstack.com

Published

2026-07-27

Last modified

2026-10-24

Weaknesses

CWE-862

Affected products

• Fundengine (Roxnor)

References

• https://patchstack.com/database/wordpress/plugin/wp-fundraising-donation/vulnerability/wordpress-fundengine-plugin-1-7-…