CyberRota Analysis
AI-GeneratedThe vulnerability in WP Sort Order versions up to 1.3.5 allows unauthenticated users to exploit broken access control mechanisms, potentially leading to unauthorized access and manipulation of sort order settings. Organizations using this plugin should prioritize remediation to prevent unauthorized data exposure and maintain the integrity of their sorting functionalities. Immediate action is recommended for all users of affected versions to mitigate potential exploitation risks.
CVE
CVE-2026-28567
Severity
HIGH
CVSS
7.5
EPSS
0.29%
Original NVD Description
Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.