Question 1

What is CVE-2026-115214 — CVE-2026-115214?

Accepted Answer

The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator.

Question 2

What is the authoritative source for CVE-2026-115214?

Accepted Answer

CVE-2026-115214 (CVE-2026-115214) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-115214CVE-2026-115214

Description

Scoring