CVE-2026-73385: WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Outranking plugin Optionsto a version that resolves this vulnerability.Fixed in 1.1.3
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior privileges. It can be exploited remotely over the network.
Which installations are affected?
Outranking Plugin Options versions 1.1.3 and earlier are affected. The provided information does not state whether any particular configuration or feature must be enabled.
What impact can exploitation have?
The reported impact is on integrity, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is identified in the supplied severity vector.