Missing Authorization Vulnerability in Brainstorm Force Presto Player
CVE-2026-45442

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Presto Player
Vendor
CVE Published:
19 May 2026

What is CVE-2026-45442?

A missing authorization vulnerability exists in Brainstorm Force's Presto Player, allowing attackers to exploit improperly configured access levels. This flaw is present in version 4.1.3 and prior, potentially enabling unauthorized users to gain access to restricted functionalities and sensitive data. It is essential for users to assess their configuration and apply the recommended security measures to mitigate this risk.

Affected Version(s)

Presto Player <= 4.1.3

References

https://patchstack.com/database/wordpress/plugin/presto-p...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bao - BlueRock | Patchstack Bug Bounty Program
.