high7.5
CVE-2026-106029
The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, a…
Impact
The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.
Affected products
| Product | Affected versions |
|---|---|
| WeddingCity Lite WordPress Plugin | through 1.0.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.