CVE-2026-121760: WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The published vector indicates it can be exploited remotely without authentication or user interaction. No privileges are required.

Q: What security impact is reported?

The issue is rated high with a 7.5 CVSS score and affects confidentiality at a high level. The supplied vector reports no integrity or availability impact.

Q: Which versions are affected?

The affected range is reported as weDocs versions through 2.6.1. A fixed version is not provided in the available data.

Published Nov 9, 2026

Updated

Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through 2.6.1.

Affected Software

1 affected component

weDevs weDocs<=2.6.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/wedocs to a version that resolves this vulnerability.
Fixed in 2.6.2

Event History

Nov 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The published vector indicates it can be exploited remotely without authentication or user interaction. No privileges are required.

What security impact is reported?

The issue is rated high with a 7.5 CVSS score and affects confidentiality at a high level. The supplied vector reports no integrity or availability impact.

Which versions are affected?

The affected range is reported as weDocs versions through 2.6.1. A fixed version is not provided in the available data.

CVE-2026-121760: WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What security impact is reported?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What security impact is reported?

Which versions are affected?