WordPress · Webpurify Profanity Filter · CVE-2026-0572
**Name of the Vulnerable Software and Affected Versions**
WebPurify Profanity Filter versions up to and including 4.0.2
**Description**
The WebPurify Profanity Filter plugin for WordPress has a flaw that allows unauthorized modification of data. This is due to a missing capability check on the `webpurify save options` function. Unauthenticated attackers can exploit this to change plugin settings.
**Recommendations**
Update WebPurify Profanity Filter to a version later than 4.0.2.