CVE-2026-110891
CVE-2026-110891 · WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through 3.54.15.
CVSS 5.4 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
wordlift
- Versions
- ≥ 0, ≤ 3.54.15: Affected; ≥ 3.54.17: Not affected (custom)
Update to 3.54.17