Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Unknown | OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. | unaffected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Fri, 02 Oct 2026 07:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-284 |
Fri, 02 Oct 2026 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that issues a slow server-side loopback request, allowing unauthenticated attackers to exhaust the site's PHP worker pool and make the entire site unavailable. | |
| Title | OMGF < 6.3.11 - Unauthenticated DoS via do_optimize | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2026-10-02T06:00:25.216Z
Reserved: 2026-09-15T08:11:48.154Z
Link: CVE-2026-91828
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-02T06:16:42.857
Modified: 2026-10-02T06:16:42.857
Link: CVE-2026-91828
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-02T07:30:07Z
No weakness.