CVE-2026-27393

MediumCVSS 5.3

Published: 21/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

The WordPress plugin CF7 WOW Styler up to version 1.7.6 contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.

Risk Assessment

An unauthenticated attacker may gain unauthorized access to functions or data, potentially leading to privilege escalation or information disclosure.

Recommendation

Update the CF7 WOW Styler plugin to the latest available version. Review and fix the access control configuration.

Original NVD description (English source)

Missing Authorization vulnerability in Tobias CF7 WOW Styler allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CF7 WOW Styler: from n/a through 1.7.6.