CVE-2026-54840PoC

LOWCVSS 7.3 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.

Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/newsletters-lite/vulnerability/wordpress-newsletters-plugin-4-13-broken-access-control-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Peaked 1d ago at 1 mentions (2026-06-26); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

PoC

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://atomicedge.io/cve-proof/cve-2026-54840-newsletters-lite-version-4-13-medium-vulnerability-proof-of-concept

Classification over time

Date	Total	Labels

2026-06-26	1	PoC1
2026-06-27	1	Patch1

Full discourse2 posts

DFIR Lab@DFIR_Lab90d
Patch
🚨 HIGH Severity: CVE-2026-54840 (CVSS 7.3) Unauthenticated Broken Access Control in Newsletters plugin ≤ v4.13. Network exploitable, no user interaction required. Patch immediately if running affected versions. #CVE #Vulnerability #PatchNow https://t.co/0tFTCmzKGW
Post summary
The tweet alerts to CVE‑2026‑54840, a high severity unauthenticated broken access control flaw in the Newsletters plugin, and urges users to patch affected versions immediately.
0000038
52 followersView on X
Atomic Edge@atomicedgeWAF91d
PoC
https://atomicedge.io/cve-proof/cve-2026-54840-newsletters-lite-version-4-13-medium-vulnerability-proof-of-concept CVE-2026-54840 newsletters-lite (CVSS Score 5.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomi…
Post summary
The post announces a proof‑of‑concept for CVE‑2026‑54840, offering a moderate CVSS score but lacks details on exploitation, real‑world attacks, or remediation.
0000039
11 followersView on X

Explore more

Back to dashboard