CVE-2026-39769

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-23

Assigner: Patchstack

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Password Recovery Exploitation.This issue affects Graphina – Charts and Graphs For Elementor: from n/a through 3.1.12.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-23

Generated

2026-11-08

AI Q&A

2026-10-06

EPSS Evaluated

2026-11-07

NVD

CVE-2026-39769

EUVD

EUVD-2026-93276

Affected Vendors & Products

Vendor	Product	Version / Range
Iqonic Design	Graphina	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-288	The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

Executive Summary

This is an unauthenticated broken authentication vulnerability in the Graphina WordPress plugin versions 3.1.12 and below. It allows attackers to bypass login systems or impersonate users without a password, classified under OWASP Top 10 A7: Identification and Authentication Failures.

Detection Guidance

To detect this vulnerability, check if the Graphina WordPress plugin version 3.1.12 or below is installed. Inspect the plugin files for unusual authentication bypass patterns or unauthorized user access logs. No specific commands are provided in the context, but monitoring for unexpected user sessions or failed login attempts may help identify exploitation attempts.

Impact Analysis

Attackers could gain unauthorized access to user accounts or perform actions as other users. While exploitation risk is low, it may lead to data breaches or unauthorized modifications. No official patch exists yet, so users should update if possible or seek mitigation from developers.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized access to sensitive data due to broken authentication. Unauthenticated attackers may bypass login systems, risking exposure of personal or health information. However, the vulnerability's severity is rated as moderate (CVSS 7.5) and exploitation priority is low.

Mitigation Strategies

Update the Graphina plugin to the latest version if available. If no patch exists, disable the plugin immediately or restrict access to the WordPress admin panel. Contact your hosting provider or web developer for further mitigation steps.

Hi! I’m here to help you understand CVE-2026-39769. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...