CVE-2026-105062: WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability
Published Oct 5, 2026
·Updated
Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17.
Affected Software
1 affected component
Brandtoss WP Admin Audit<=1.2.17
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WP Admin Auditto a version that resolves this vulnerability.Fixed in 1.2.18
Event History
Oct 5, 2026
CVE Published
via MITRE·08:39 AM
Data Sourced
via MITRE·08:39 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability requires network access and low-privileged access to the affected WordPress environment. No user interaction is required.
2
What security impact is documented?
The documented impact is limited confidentiality impact. Integrity and availability impacts are not indicated by the provided severity vector.
3
Which versions are affected?
WP Admin Audit versions through 1.2.17 are affected. The available data does not identify a fixed version.