CVE-2026-62035: WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The attacker needs authenticated Subscriber-level access to a WordPress site using the affected plugin. The CVSS vector indicates the attack can be performed remotely with low complexity and does not require user interaction.

Q: What is the likely impact of successful exploitation?

Successful exploitation can result in low impact to confidentiality, integrity, and availability. The vulnerability is rated medium severity with a CVSS score of 6.3.

Q: Which plugin versions are affected?

Upcasted AWS S3 for WordPress Plugin versions 3.1.0 and earlier are affected.

Published Oct 10, 2026

Updated

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.

Affected Software

1 affected component

Upcasted AWS S3 for WordPress Plugin<=3.1.0

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker needs authenticated Subscriber-level access to a WordPress site using the affected plugin. The CVSS vector indicates the attack can be performed remotely with low complexity and does not require user interaction.

What is the likely impact of successful exploitation?

Successful exploitation can result in low impact to confidentiality, integrity, and availability. The vulnerability is rated medium severity with a CVSS score of 6.3.

Which plugin versions are affected?

Upcasted AWS S3 for WordPress Plugin versions 3.1.0 and earlier are affected.

CVE-2026-62035: WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Which plugin versions are affected?