A vulnerability was found in Sergiy Dzysyak Suggestion Toolkit Plugin up to 5.0 on WordPress. It has been rated as critical. The impacted element is an unknown function. Performing a manipulation results in missing authorization.

This vulnerability is reported as CVE-2026-24622. The attack is possible to be carried out remotely. No exploit exists.