Broken Access Control in Style Kits Plugin by AnalogWP
CVE-2026-65484

6.3MEDIUM

Key Information:

Vendor

WordPress
Status
Style Kits
Vendor
CVE Published:
23 July 2026

What is CVE-2026-65484?

The Style Kits plugin by AnalogWP has a broken access control vulnerability that affects versions up to 2.6.5. This flaw allows unauthorized users to access certain functionalities that should be restricted, leading to potential exposure of sensitive features or data. It is critical for users of this plugin to review their installations and apply necessary security patches or updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Style Kits <= 2.6.5

References

https://patchstack.com/database/wordpress/plugin/analogwp...
vdb-entry

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bao - BlueRock | Patchstack Bug Bounty Program
.