Skip to content
Sign in
5.3 Medium

CVE-2026-121767 WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability

Description

Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through 2.6.1.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitable remotely over the network, without an account and without any user action; the impact on data or service is limited.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Affected products and versions

Product Affected versions Fixed in
weDocs 2.6 earliest → 2.6.1 No fix stated

Other CVEs of weDocs

The 3 CVEs of weDocs →
CVE-2026-39520 Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control… 5.3 Medium CVE-2024-34442 Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4 5.3 Medium
Track this CVE