{"id":"CVE-2026-95587","published":"2026-09-30T13:17:28.720","lastModified":"2026-09-30T14:18:04.593","description":"Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/migrator-plugin/vulnerability/wordpress-hostinger-migrator-plugin-1-0-broken-access-control-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Hostinger Migrator plugin version 1.0 and earlier contains a broken access control vulnerability that allows unauthenticated users to access restricted functionality or data. This flaw enables attackers to bypass authentication mechanisms without needing valid credentials.","exploitability":"Exploitation is straightforward with no prerequisites, as the vulnerability allows completely unauthenticated access to protected features.","blast_radius":"If exploited, this vulnerability could allow attackers to access sensitive migration data and functionality, potentially leading to unauthorized data transfers or system compromise.","remediation":"Upgrade to version 1.1 or later to remediate the broken access control vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["access-control","unauthenticated","plugin"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:05:27.779Z"}}