Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-13389 The webtoffee-cookie-consent WordPress plugin before 3.5.3 does not perform authorization checks on several of its REST API routes, allowing unauthenticated attackers… https://www.cve.org/CVERecord?id=CVE-2026-13389
Post summary
The text announces a vulnerability in the webtoffee-cookie-consent WordPress plugin that allows unauthenticated attackers to exploit missing authorization checks on its REST API routes.
CVE-2026-13389 Unauthenticated REST API Authorization Bypass in WebToffee Cookie Consent Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-13389
Post summary
A new vulnerability (CVE‑2026‑13389) for an unauthenticated REST API authorization bypass in the WebToffee Cookie Consent Plugin has been disclosed on VulMon.
🚨*CVE* CVE-2026-13389 The webtoffee-cookie-consent WordPress plugin before 3.5.3 does not perform authorization checks on several of its REST API routes, allowing unauthenticated attackers… https://www.cve.org/CVERecord?id=CVE-2026-13389 ----- Traducción: CVE-2026-13389 El … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑13389, describing a lack of authorization checks on REST API routes in the webtoffee‑cookie‑consent WordPress plugin before v3.5.3, which permits unauthenticated attacks. No PoC, exploit code, patch guidance, or active exploitation evidence is mentioned.