Live › vulnerability › CVE-2026-115958
Go to dashboardWP Discussion Board, a WordPress plugin, has a missing authorization check that lets requests reach functions without the proper access control. Sources do not say which actions an attacker can perform or what data they can read or change.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 10:29 UTC. All times on this page are UTC.
Sites running the WP Discussion Board WordPress plugin at version or earlier are in scope. Sources do not say which configurations or roles make the flaw reachable, so unknown for the rest.
2.6.0No product ranges from the sources yet.
wp-discussion-board in the WordPress admin plugin list or with wp plugin get wp-discussion-board --field=versionwp-discussion-board to a version later than 2.6.0, if a fixed release is publishedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-115958")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.