CVE Catalog
CVE-2026-39607
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.17%
6th percentile - higher than 6% of all known CVEs
Summary
The Filter Plus plugin for WordPress lacks authorization, allowing an attacker to exploit incorrectly configured access control security levels.
Risk Assessment
Risk of unauthorized access to administrative functions or data, potentially leading to privilege escalation.
Recommendation
Update the Filter Plus plugin to the latest version.
Original NVD description (English source)
Missing Authorization vulnerability in Wpbens Filter Plus filter-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter Plus: from n/a through <= 1.1.17.