CVE-2026-39705

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

The MIPL WC Multisite Sync plugin for WordPress up to version 1.4.4 has a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.

Risk Assessment

The organization risks unauthorized synchronization operations between sites in a multisite network, potentially leading to data integrity issues.

Recommendation

Update the MIPL WC Multisite Sync plugin to the latest version. Restrict synchronization functions to trusted administrators only.

Original NVD description (English source)

Missing Authorization vulnerability in Mulika Team MIPL WC Multisite Sync mipl-wc-multisite-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MIPL WC Multisite Sync: from n/a through <= 1.4.4.