CVE-2026-116855: WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/my-auctions-allegro-free-editionto a version that resolves this vulnerability.Fixed in 4.0.4
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability requires low-level privileges. It is remotely exploitable and does not require user interaction.
Which installations are affected?
WPHocus My auctions allegro is affected through version 4.0.3. The provided data does not identify a fixed version or any unaffected configuration.
What impact could successful exploitation have?
Successful exploitation may allow unauthorized actions because of incorrectly configured access-control levels. The reported impact includes low confidentiality and integrity impact, with no availability impact.