Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

WordPress: Hard-coded Passwords Exposed to Attackers

CVE-2026-59507 · published 2 months ago
Summary

A security issue in WordPress allows attackers to access sensitive information. This is because the software has hard-coded passwords, which are like pre-set combinations that don't change. This puts your website and data at risk. Update WordPress immediately to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
priority portal generator addon to priority erp (developed by soft solutions) All versions without Priwall v3
Original advisory text
Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).

This issue affects Portal Generator addon to Priority ERP (developed by Soft Solutions): All versions without Priwall v3.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-798Use of Hard-coded Credentials
Timeline
Published13 Aug 2026
Updated4 Nov 2026
First seen13 Aug 2026
Sources
CVE-2026-59507 · NVD
CVE-2026-59507 · MITRE
Track software like this
Free during beta