← CVE Intelligence

CVE-2026-112861

WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database: from n/a through 2.7.8.5.

Affected (CNA)

Vendor / productVersions
xnau webdesign / Participants Databaseaffected 0 through 2.7.8.5

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.