---
id: "CVE-2026-121761"
page: "https://infrastack.ai/live/CVE-2026-121761"
kind: "vulnerability"
aliases: ["CVE-2026-121761"]
title: "Infomaniak VOD WordPress plugin: missing authorization check exposes access controls"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["infomaniak", "other", "vod-infomaniak", "wordpress"]
not_affected_if: ["plugin-not-installed", "plugin-version-above-1.5.15"]
published_at: "2026-11-07T09:17:13+00:00"
first_seen_at: "2026-11-07T09:46:24+00:00"
updated_at: "2026-11-07T09:48:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121761", "first_seen_at": "2026-11-07T09:46:24+00:00"}]
exploit_sources: []
---

# Infomaniak VOD WordPress plugin: missing authorization check exposes access controls

Link for people: https://infrastack.ai/live/CVE-2026-121761 (this .md is for agents)

The VOD Infomaniak plugin is missing an authorization check, so access control settings can be exploited when configured incorrectly. The sources say the flaw affects versions up to and including 1.5.15 and rate it medium (CVSS 4.3).

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of the VOD Infomaniak plugin (`vod-infomaniak`) in the plugin list
- Compare it against the affected range: through `1.5.15`

## Fix

- Move to a version later than `1.5.15`; the sources do not name the fixed version

## Timeline

- 2026-11-07T09:46:24+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121761

## From the sources

Missing Authorization vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VOD Infomaniak: from n/a through 1.5.15.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_