Vulnerability in Builderall For Wordpress

CVE-2026-11882

The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthenticated attackers to complete the connection flow and overwrite the s…

Affected products

  • Unknown Builderall For Wordpress — versions 0

References