Vulnerability in Lenxel Wp

CVE-2026-12586

The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including…

Affected products

  • Unknown Lenxel Wp — versions 0

References