Live › vulnerability › CVE-2026-119495
The Better Search WordPress plugin by WebberZone lacks an authorization check, so access controls can be bypassed when they are configured in certain ways. The sources affect all versions through 4.5.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Sites running the Better Search WordPress plugin at version 4.5.2 or earlier. The description says exposure depends on access control security levels being configured, so sites using default settings may be less exposed. The sources do not say which configuration triggers the flaw.
No product ranges from the sources yet.
4.5.2 are listed as affected.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Search: from n/a through 4.5.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-119495")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.