CVE · Medium

CVE-2026-123481 — Missing Authorization

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-123481 Missing Authorization Missing Authorization Medium 4.3 < 3.4.3 3.4.3 2026-11-11 —

CVE-2026-123481 is a Missing Authorization vulnerability in the WordPress plugin wpextended (wpextended). Versions before 3.4.3 are affected. Fixed in 3.4.3. CVSS score: 4.3 (Medium). Published 2026-11-11.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.