CVE-2026-39439: WordPress WebSamurai plugin <= 1.0.7 - Broken Access Control vulnerability
Published Oct 2, 2026
·Updated
Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebSamurai: from n/a through 1.0.7.
Affected Software
1 affected component
Kiera Howe WebSamurai<=1.0.7
Event History
Oct 2, 2026
CVE Published
via MITRE·02:43 PM
Data Sourced
via MITRE·02:43 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
WebSamurai versions through 1.0.7 are affected. The available information does not identify a fixed version.
2
What level of access does an attacker need?
The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation can be performed remotely and does not require user interaction.
3
What is the expected impact?
The vulnerability can result in unauthorized modification of data or application state, reflected by an integrity impact of High. No confidentiality or availability impact is indicated in the supplied CVSS vector.