Unauthorized Access Issue in Long Watch Studio MyRewards Plugin

CVE-2026-40786

What is CVE-2026-40786?

A missing authorization vulnerability exists in the MyRewards plugin for WordPress, developed by Long Watch Studio. This flaw allows an attacker to exploit incorrectly configured access control security levels, potentially enabling unauthorized access to sensitive functionalities. The issue affects all versions of MyRewards up to and including 5.7.3, highlighting the importance of keeping your plugins updated and properly configured to mitigate security risks.

References