SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-28567

HIGH · CVSS 7.5 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability in WP Sort Order versions up to 1.3.5 allows unauthenticated users to exploit broken access control mechanisms, potentially leading to unauthorized access and manipulation of sort order settings. Organizations using this plugin should prioritize remediation to prevent unauthorized data exposure and maintain the integrity of their sorting functionalities. Immediate action is recommended for all users of affected versions to mitigate potential exploitation risks.

CVE
CVE-2026-28567
Severity
HIGH
CVSS
7.5
EPSS
0.29%

Original NVD Description

Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.