{"uuid": "64f780d2-1ff5-4e79-bd73-c6d7144e61f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14281", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117330504862751834", "content": "CVE-2026-14281 (CVSS 9.8, CRITICAL) in 101gen Automation Web Platform \u2013 Notifications & OTP for WooCommerce (<=4.8.6) allows unauthenticated admin account creation and OTP bypass via REST API. Disable plugin or restrict endpoints now! https://radar.offseq.com/threat/cve-2026-14281-cwe-269-improper-privilege-management-in-101gen-automation-web-platform-notifications-f1da67bf03068bca #OffSeq #WordPress #CVE202614281", "creation_timestamp": "2026-09-25T07:30:25.135639Z"}