CVE-2026-121767: WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability

Q: Which versions are affected?

The issue affects weDocs through version 2.6.1. The available information does not identify a fixed version.

Q: What is the underlying security issue?

The vulnerability is a missing-authorization issue caused by incorrectly configured access-control security levels.

Published Nov 7, 2026

Updated

Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through 2.6.1.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress weDocs plugin to a version that resolves this vulnerability.
Fixed in 2.6.2

Event History

Nov 7, 2026

CVE Published

via MITRE·08:48 AM

Data Sourced

via MITRE·08:48 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which versions are affected?

The issue affects weDocs through version 2.6.1. The available information does not identify a fixed version.

What is the underlying security issue?

The vulnerability is a missing-authorization issue caused by incorrectly configured access-control security levels.

CVE-2026-121767: WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which versions are affected?

What is the underlying security issue?

Company

Resources

Contact

Frequently Asked Questions

Which versions are affected?

What is the underlying security issue?