Live › vulnerability › CVE-2026-112218
Go to dashboardThe majestic-support plugin for WordPress, by Ahmad, has a missing authorization check that allows access control to be exploited when it is incorrectly configured. The sources do not say which data or actions an attacker can reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Majestic Support WordPress plugin version or earlier are in the affected range. The sources do not describe the required configuration or role, so unknown. Sites that do not run this plugin can skip it.
1.2.1No product ranges from the sources yet.
majestic-support plugin is installed and its version in the WordPress admin under Plugins1.2.1)1.2.1, if one is available (unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-112218")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.