Access Control Vulnerability in WP Lab's WP-Lister Lite for Amazon
CVE-2026-121778

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
WP-lister Lite For Amazon
Vendor
CVE Published:
7 November 2026

What is CVE-2026-121778?

The WP-Lister Lite for Amazon plugin by WP Lab suffers from a missing authorization vulnerability. This issue allows for the exploitation of incorrectly configured access control levels, potentially giving unauthorized users access to sensitive functionalities. The vulnerability affects versions n/a through 2.9.2 of the plugin, posing a significant risk to users who have not updated to a secured version.

Affected Version(s)

WP-Lister Lite for Amazon 0 <= 2.9.2

References

https://patchstack.com/database/wordpress/plugin/wp-liste...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Tang | Patchstack Bug Bounty Program
.