CVE-2026-62081: WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability
Published Sep 30, 2026
·Updated
Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.
Affected Software
1 affected component
WordPress Flexible PDF Coupons<=1.14.11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Flexible PDF Couponsto a version that resolves this vulnerability.Fixed in 1.14.12
Event History
Sep 30, 2026
CVE Published
via MITRE·12:26 PM
Data Sourced
via MITRE·12:26 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs Contributor-level access to a WordPress site running an affected version of the Flexible PDF Coupons plugin. The provided data does not indicate that unauthenticated users can exploit it.
2
What security impact is identified?
The issue is an insecure direct object reference vulnerability with low integrity and availability impact. The provided data does not identify any confidentiality impact.
3
Which plugin versions are affected?
Flexible PDF Coupons versions 1.14.11 and earlier are identified as affected.