CVE-2026-95526: WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The vulnerability is described as unauthenticated, so an attacker does not need a WordPress account or prior privileges to exploit it.

Q: Which installations are affected?

BEAR plugin versions 1.2.2 and earlier are identified as affected. The provided data does not state whether a particular plugin configuration is required.

Q: What is the potential impact?

The severity vector indicates low potential impact to confidentiality, integrity, and availability. The attack is network-accessible, requires low complexity, and does not require user interaction.

Published Oct 6, 2026

Updated

Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.

Affected Software

1 affected component

WordPress BEAR Plugin<=1.2.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress BEAR Plugin to a version that resolves this vulnerability.
Fixed in 1.2.3

Event History

Oct 6, 2026

CVE Published

via MITRE·08:35 AM

Data Sourced

via MITRE·08:35 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability is described as unauthenticated, so an attacker does not need a WordPress account or prior privileges to exploit it.

Which installations are affected?

BEAR plugin versions 1.2.2 and earlier are identified as affected. The provided data does not state whether a particular plugin configuration is required.

What is the potential impact?

The severity vector indicates low potential impact to confidentiality, integrity, and availability. The attack is network-accessible, requires low complexity, and does not require user interaction.

CVE-2026-95526: WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the potential impact?