CVE-2026-39606

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

The BizReview theme for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 1.5.13.

Risk Assessment

An unauthorized user can modify reviews or theme settings, potentially leading to content manipulation and loss of user trust.

Recommendation

It is recommended to update the BizReview theme to the latest version that eliminates this vulnerability.

Original NVD description (English source)

Missing Authorization vulnerability in Foysal Imran BizReview bizreview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BizReview: from n/a through <= 1.5.13.