Missing Authorization Vulnerability in Katalogportal PDF Sync Plugin for WordPress

CVE-2026-3649

What is CVE-2026-3649?

The Katalogportal PDF Sync plugin for WordPress contains a vulnerability that allows authenticated users to access information they should not have permissions for. This is due to the katalogportal_popup_shortcode() function failing to implement necessary capability checks and nonce verification. As a result, any user with an account, including those with minimal permissions like Subscribers, can exploit this weakness. They can make AJAX calls to retrieve all synchronized PDF attachments, accessing both public and private content along with sensitive metadata. This lack of authorization checks may lead to unwanted exposure of potentially confidential data, necessitating immediate mitigation.

References