CVE-2026-104678

2.7 Faible

Publiée le 07/10/2026 à 09:16 · Modifiée le 07/10/2026 à 16:52 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin before 1.3.4 option that should require administrator access.

Traduire en français

Produits concernés

Unknown CP Media Player

Scores CVSS

Version	Score	Source	Vecteur
3.1	2.7 Faible	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-284

Références

https://wpscan.com/vulnerability/d650ea4e-62f9-48a0-8cb3-e6761a95eeaa/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories