Access Control Configuration Flaw in WP Discussion Board by WordPress
CVE-2026-115958

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
WP Discussion Board
Vendor
CVE Published:
26 October 2026

What is CVE-2026-115958?

The WP Discussion Board plugin for WordPress contains a security flaw stemming from improperly configured access control settings. This missing authorization issue allows potential attackers to exploit the system by bypassing security measures intended to protect sensitive functionalities. Users of the affected versions should consider implementing necessary updates and examining their configuration settings to mitigate risks associated with unauthorized access.

Affected Version(s)

WP Discussion Board 0 <= 2.6.0

References

https://patchstack.com/database/wordpress/plugin/wp-discu...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Tang | Patchstack Bug Bounty Program
.