CVE-2026-32472

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

Summary

The Online Contact Widget plugin versions up to 1.3.0 contain an unauthenticated Broken Access Control vulnerability. This means an attacker without logging in can gain unauthorized access to functions that should be protected.

Risk Assessment

The risk includes unauthorized access to sensitive plugin functions, which could lead to data integrity compromise or unauthorized configuration changes.

Recommendation

It is recommended to immediately update the Online Contact Widget plugin to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.