CVE-2026-81279

Subscriber Broken Access Control in Push Notification for Post and BuddyPress <= 3.20 versions.

Published Aug 27, 2026
CVSS 5.4 medium
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

Murali Push Notification for Post and BuddyPress

CVE-2026-81279 at the National Vulnerability Database