CVE-2026-40808
WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
CVSS score
6.5
EPSS probability
%0.3
Risk score
0.0
Published
5 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2023-28121
Improper authentication in Automattic Woocommerce Payments
A
Patch status unknown Public Exploits:10EPSS %87
4.9
CVE-2024-1310
Vulnerability in Automattic Woocommerce
A
Patch status unknown Public Exploits:1EPSS %1
7.5
CVE-2026-4338
Vulnerability in Automattic Activitypub
A
Patch status unknownEPSS %0
6.5
CVE-2026-73562
Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)
A
Patch verifiedEPSS %1
7.1
CVE-2026-93485
WordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerability
A
Patch status unknownEPSS %0
6.9
CVE-2026-66666
WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
A
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-40808"