CVE-2026-40801: WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability
Published Oct 10, 2026
·Updated
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
Affected Software
1 affected component
Wordable Wordable WordPress plugin<=8.2.10
Event History
Oct 10, 2026
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
A user with Subscriber-level access can exploit the broken access control issue. The vulnerability is remotely reachable and does not require user interaction.
2
Which installations are affected?
Wordable plugin versions up to and including 8.2.10 are affected. The provided information does not identify a fixed version or any configuration prerequisites.
3
What is the potential impact?
The issue can allow a low-privileged authenticated user to affect the confidentiality and integrity of the Wordable plugin's accessible data or functions. Availability impact is not indicated by the supplied severity vector.