[ CVE-2026-106029 · Published 11 Oct 2026 ]
Vulnerability in Unknown WeddingCity Lite
CVSS 7.5
EPSS <1%No fix listed yet
[ Description ]Official description
The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.