CVE-2026-112861: WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5.
Affected Software
Event History
Frequently Asked Questions
Which deployments are within the affected range?
Participants Database installations are affected from an unspecified starting version through 2.7.8.5. The provided data does not identify a fixed version.
What access does an attacker need to exploit this issue?
The CVSS vector indicates network access is sufficient, exploitation has low complexity, and the attacker must have low-level privileges. No user interaction is required.
What is the expected impact if exploitation succeeds?
The issue is rated medium severity with low impact to confidentiality, integrity, and availability. The described weakness is an authorization bypass through a user-controlled key.