CVE-2026-112830: WordPress Brizy plugin <= 2.8.25 - Broken Access Control vulnerability
Published Nov 13, 2026
·Updated
Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through 2.8.25.
Affected Software
1 affected component
Brizy Brizy<=2.8.25
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.8.26
Event History
Nov 13, 2026
CVE Published
via MITRE·01:04 PM
Data Sourced
via MITRE·01:04 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates that exploitation can be performed remotely without authentication or user interaction, with low attack complexity.
2
What is the impact if exploitation succeeds?
The stated impact is limited disclosure of information. The available data does not indicate integrity or availability impact.
3
Which Brizy versions are affected?
Brizy versions through 2.8.25 are affected. The affected version range begins at an unspecified earlier version.