CVE-2026-0674 — Vulnerability intelligence

Campaign Monitor — Campaign Monitor for WordPress

Published: 2026-01-08T09:17:55.119Z

CVSS

4.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Campaign Monitor for WordPress: from n/a through 2.9.1.

Sources

• CVE-2026-0674
• Original advisory
• CVE-2026-0674