Access Control Flaw in Visualizer WordPress Plugin by Visualizer
CVE-2026-86782
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 11 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-86782?
The Visualizer WordPress plugin prior to version 4.0.6 contains an access control weakness that allows unauthorized users with the Contributor role and higher to manipulate content. This includes the ability to publish, rename, or overwrite posts and pages, even affecting private drafts owned by other users. This flaw poses significant risks to user privacy and content integrity.
Affected Version(s)
Visualizer 4.0.0 < 4.0.6
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.