CVE-2026-62072: WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerability

Q: Who can exploit this issue?

An attacker needs Subscriber-level access to a WordPress site running an affected version of the Progress Planner plugin. The vulnerability is remotely exploitable and does not require user interaction.

Q: What impact could successful exploitation have?

Successful exploitation could allow high-impact compromise of confidentiality, integrity, and availability within the affected scope, as reflected by the CVSS vector.

Q: Which plugin versions are affected?

Progress Planner versions up to and including 1.10.0 are affected.

Published Oct 6, 2026

Updated

Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions.

Affected Software

1 affected component

WordPress Progress Planner<=1.10.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Progress Planner plugin to a version that resolves this vulnerability.
Fixed in 1.10.1

Event History

Oct 6, 2026

CVE Published

via MITRE·08:35 AM

Data Sourced

via MITRE·08:35 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs Subscriber-level access to a WordPress site running an affected version of the Progress Planner plugin. The vulnerability is remotely exploitable and does not require user interaction.

What impact could successful exploitation have?

Successful exploitation could allow high-impact compromise of confidentiality, integrity, and availability within the affected scope, as reflected by the CVSS vector.

Which plugin versions are affected?

Progress Planner versions up to and including 1.10.0 are affected.

CVE-2026-62072: WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact could successful exploitation have?

Which plugin versions are affected?