CVE-2026-27361: WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability
Published Mar 5, 2026
·Updated
Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through <= 15.1.
Affected Software
2 affected components
Webcodingplace Responsive Posts Carousel Pro<=15.1
wordpress/responsive-posts-carousel-pro<=15.1
Event History
Mar 5, 2026
CVE Published
via MITRE·05:53 AM
Data Sourced
via MITRE·05:53 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated WordPress account or user interaction?
No. The CVSS vector indicates network-accessible exploitation with no privileges required and no user interaction required.
2
What is the expected security impact?
The CVSS metrics indicate a high confidentiality impact, with no integrity or availability impact listed.
3
Which installations should be considered affected?
Responsive Posts Carousel Pro versions through 15.1 are listed as affected. The supplied data does not identify a fixed version.