CVE-2026-66452: WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions.

Affected Software

1 affected component

WordPress Legal Text Connector<=1.0.13

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Legal Text Connector of the IT-Recht Kanzlei plugin to a version that resolves this vulnerability.
Fixed in 1.0.14

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

The severity of CVE-2026-66452 is rated as medium with a CVSS score of 6.5.

To fix CVE-2026-66452, update the WordPress Legal Text Connector plugin to version 1.0.14 or later.

CVE-2026-66452 is classified as a Broken Access Control vulnerability.

CVE-2026-66452 allows unauthenticated users to access restricted functionalities, potentially leading to data exposure.

CVE-2026-66452 was published on August 6, 2026.