Missing Authorization in weDocs Plugin by weDevs
CVE-2026-121767

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Wedocs
Vendor
CVE Published:
7 November 2026

What is CVE-2026-121767?

The weDocs plugin developed by weDevs is susceptible to a missing authorization vulnerability, allowing unauthorized access due to incorrectly configured access control settings. This flaw can enable attackers to exploit weak security measures, thereby restricting the safe use of the plugin. All users running versions up to and including 2.6.1 should implement necessary security measures and updates to safeguard their applications.

Affected Version(s)

weDocs 0 <= 2.6.1

References

https://patchstack.com/database/wordpress/plugin/wedocs/v...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anatoly Gorbounov (x1will) | Patchstack Bug Bounty Program
.