A vulnerability was found in InPost PL Plugin up to 1.9.0 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the component Destination Handler. The manipulation results in improper access controls.
This vulnerability is reported as CVE-2026-9702. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-9702 | InPost PL Plugin up to 1.9.0 on WordPress Destination access control (EUVD-2026-39188)
A vulnerability was found in InPost PL Plugin up to 1.9.0 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the component Destination Handler. The manipulation results in improper access…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR