WP connect vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WP connect products: 1 record(s), with severity, exploitation and fixes.

WP Sync for Notion 1

Exploited only (KEV) →

CVE-2026-25020 Medium · 4.3 CWE-862 Feb 3, 2026

WordPress WP Sync for Notion plugin <= 1.7.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through <= 1.7.0.