CVE-2026-62134: WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Starter Templates Pluginto a version that resolves this vulnerability.Fixed in 4.7.6
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs Contributor-level access to a WordPress site using the affected Starter Templates plugin. The CVSS vector indicates exploitation can be performed remotely without user interaction.
What security impact is indicated?
The available CVSS vector indicates an integrity impact only, with no stated confidentiality or availability impact. The specific objects or actions accessible through the IDOR are not provided.
Are default plugin installations affected?
The provided information identifies Starter Templates versions 4.7.5 and earlier as affected, but it does not state whether a particular default configuration or feature must be enabled.