CVE-2026-95587

Summary

The Hostinger Migrator plugin version 1.0 and earlier contains a broken access control vulnerability that allows unauthenticated users to access restricted functionality or data. This flaw enables attackers to bypass authentication mechanisms without needing valid credentials.

Exploitability

Exploitation is straightforward with no prerequisites, as the vulnerability allows completely unauthenticated access to protected features.

Blast radius

If exploited, this vulnerability could allow attackers to access sensitive migration data and functionality, potentially leading to unauthorized data transfers or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.1 or later to remediate the broken access control vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.