CVE-2026-108480: WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability
Published Oct 14, 2026
·Updated
Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Skydropx: from n/a through 2.1.4.
Affected Software
1 affected component
Skydropx Skydropx<=2.1.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Skydropx pluginto a version that resolves this vulnerability.Fixed in 2.1.5
Event History
Oct 14, 2026
CVE Published
via MITRE·06:09 PM
Data Sourced
via MITRE·06:09 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Skydropx versions through 2.1.4 are affected. The available information does not identify a fixed version.
2
Can an unauthenticated attacker exploit this issue remotely?
Yes. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
3
What is the potential impact of successful exploitation?
The CVSS vector indicates high confidentiality impact and low integrity impact. It does not indicate an availability impact.