What is GHSA-9p3v-99mv-6443?

GHSA-9p3v-99mv-6443 is a security advisory published by GitHub Security Advisories with Medium severity. The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of...

Which CVE IDs does GHSA-9p3v-99mv-6443 cover?

GHSA-9p3v-99mv-6443 covers the following CVE IDs: CVE-2026-89300. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9p3v-99mv-6443?

GHSA-9p3v-99mv-6443 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-9p3v-99mv-6443MediumCVSS 5.3

The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of...

Vendor

GitHub Security Advisories

Published

September 28, 2026

Last Modified

September 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-89300 →

📋 Description

The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbitrary data into its own database table, as well as to make the site send templated verification emails to arbitrary email addresses. The route is not rate limited either.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-89300
https://wpscan.com/vulnerability/a5ad8171-83c1-4c2e-83ac-24f008fadb82
https://github.com/advisories/GHSA-9p3v-99mv-6443