p PatchFirst

CVE-2026-108480

CVE-2026-108480 · WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Skydropx: from n/a through 2.1.4.

CVSS 8.2 · High · EPSS 0.3% · Fix available

Published
Updated

Affected products and versions

  • skydropx

    Versions
    • ≥ 0, ≤ 2.1.4: Affected; ≥ 2.1.5: Not affected (custom)

    Update to 2.1.5

Original sources

Check your server →