CVE Catalog
CVE-2026-39569
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
The 12 Step Meeting List plugin for WordPress up to version 3.19.9 lacks authorization, allowing exploitation of incorrectly configured access control security levels. Attackers can gain unauthorized access to features.
Risk Assessment
The organization risks unauthorized access to plugin features, potentially leading to data modification or privilege escalation.
Recommendation
Update the 12 Step Meeting List plugin to a version above 3.19.9 if available, or contact the vendor for a patch.
Original NVD description (English source)
Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through <= 3.19.9.