corpus.blog
41,554 blogs · 5,217,468 posts Claim your blog
Record · corpus.blog/posts/01a08784-d604-7300-b1d7-c5c037434c1c

CVE-2026-10580: Hippoo Admin Account Takeover via REST API (CVSS 9.8)

hurayraiit.com · published 6 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hurayraiit.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
10
Words captured
1,646

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://wordpress.org/plugins/hippoo/
wordpress.org
https://www.cve.org/CVERecord?id=CVE-2026-10580
cve.org
https://downloads.wordpress.org/plugin/hippoo.1.9.4.zip
downloads.wordpress.org
https://downloads.wordpress.org/plugin/hippoo.1.9.5.zip
downloads.wordpress.org
https://www.wordfence.com/threat-intel/vulnerabilities/researchers/mitchell
wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/hippoo/hippoo-mobile-app-for-woocommerce-194-unauthenticated-authentication-bypass-to-administrator-account-takeover-via-rest-api
wordfence.com
https://plugins.trac.wordpress.org/browser/hippoo/tags/1.8.5/app/permissions.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/hippoo/tags/1.8.5/app/web_api_auth.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/hippoo/tags/1.8.5/app/web_api.php
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset/3557733/hippoo
plugins.trac.wordpress.org