CVE-2026-95514: WordPress Netgsm plugin <= 2.10.0 - Bypass Vulnerability vulnerability
Published Sep 23, 2026
·Updated
Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions.
Affected Software
1 affected component
netgsm Netgsm WordPress plugin<=2.10.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Netgsm pluginto a version that resolves this vulnerability.Fixed in 2.10.2
Event History
Sep 23, 2026
CVE Published
via MITRE·06:14 PM
Data Sourced
via MITRE·06:14 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:19 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated WordPress account or user interaction?
No. The vulnerability is rated as remotely exploitable with no privileges required and no user interaction required.
2
What security impact is indicated by the available severity data?
The severity vector indicates low integrity impact. It does not indicate confidentiality or availability impact.
3
How can I determine whether an installation is in scope?
Check the installed Netgsm plugin version. Versions 2.10.0 and earlier are identified as affected.