CVE-2026-78528

MediumCVSS 5.3

Published: 17/09/2026(UTC)Updated: 19/09/2026(UTC)Translated: 17/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

Unauthenticated Broken Access Control in BerqWP <= 4.1.15 versions. The vulnerability allows bypassing access controls without authentication.

Risk Assessment

An unauthenticated attacker can access functions or data they should not have access to, potentially leading to unauthorized actions. The risk affects application confidentiality and integrity.

Recommendation

Update BerqWP to a version later than 4.1.15 to fix the Broken Access Control vulnerability. Verify access control mechanisms in the application.

Other vulnerabilities in BerqWP

CVE-2025-58979Medium
The BerqWP plugin (versions up to 2.2.53) has a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

Original NVD description (English source)

Unauthenticated Broken Access Control in BerqWP <= 4.1.15 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS