{"id":"CVE-2026-39769","published":"2026-10-06T09:17:49.280","lastModified":"2026-10-06T15:04:25.990","description":"Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-288"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/graphina-elementor-charts-and-graphs/vulnerability/wordpress-graphina-plugin-3-1-12-broken-authentication-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Graphina versions 3.1.12 and earlier suffer from unauthenticated broken authentication, allowing attackers to bypass authentication without valid credentials. This vulnerability enables unauthorized access to the application's functionality.","exploitability":"Exploitation is straightforward with no prerequisites, as the vulnerability allows complete authentication bypass for all users without requiring any valid credentials or session tokens.","blast_radius":"The impact could be significant as attackers can gain full access to Graphina's administrative and user features without authentication, potentially leading to data exposure or unauthorized modifications.","remediation":"Upgrade to Graphina version 3.1.13 or later to remediate this unauthenticated broken authentication vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","web","unauthenticated","broken-auth"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:04:01.403Z"}}