CVE-2026-119495: WordPress Better Search plugin <= 4.5.2 - Broken Access Control vulnerability

Q: Which installations are affected?

Better Search versions through 4.5.2 are affected. The available data does not identify a safe fixed version.

Q: Can this be exploited remotely without credentials?

The vector is network-accessible and requires neither privileges nor user interaction, according to the supplied CVSS metrics. The available data does not specify the affected endpoint or request needed for exploitation.

Q: What is the likely impact?

The supplied metrics rate the issue medium severity with low confidentiality impact and no stated integrity or availability impact. It is described as broken access control caused by missing authorization.

Published Nov 3, 2026

Updated

Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Search: from n/a through 4.5.2.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Better Search plugin to a version that resolves this vulnerability.
Fixed in 4.5.3

Event History

Nov 3, 2026

CVE Published

via MITRE·04:43 PM

Data Sourced

via MITRE·04:43 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

Better Search versions through 4.5.2 are affected. The available data does not identify a safe fixed version.

Can this be exploited remotely without credentials?

The vector is network-accessible and requires neither privileges nor user interaction, according to the supplied CVSS metrics. The available data does not specify the affected endpoint or request needed for exploitation.

What is the likely impact?

The supplied metrics rate the issue medium severity with low confidentiality impact and no stated integrity or availability impact. It is described as broken access control caused by missing authorization.

CVE-2026-119495: WordPress Better Search plugin <= 4.5.2 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

Can this be exploited remotely without credentials?

What is the likely impact?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Can this be exploited remotely without credentials?

What is the likely impact?