CVE-2026-112826

MediumCVSS 5.3

Published: 22/10/2026(UTC)Updated: 22/10/2026(UTC)Translated: 22/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

The Falcon – WordPress Optimizations & Tweaks plugin by eLightUp, versions up to 2.12.0, contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels.

Risk Assessment

An attacker could gain access to administrative functionality or data, potentially leading to unauthorized modifications of the WordPress configuration.

Recommendation

Update the Falcon plugin to a version newer than 2.12.0 when available and review user permissions.

Other vulnerabilities in Falcon – WordPress Optimizations & Tweaks

CVE-2026-59531High
The Falcon – WordPress Optimizations & Tweaks plugin in version 2.10.0 and earlier has an unknown vulnerability exploitable by an unauthenticated user. No detailed information is available.

Original NVD description (English source)

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS