CVE-2026-104386

MEDIUM NVD

CVSS Score 6.5

Severity MEDIUM

Published Oct 05, 2026

Vendor unknown

Description

Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3.

References

https://patchstack.com/database/wordpress/plugin/wpvr/vulnerability/wordpress-wp-vr-plugin-9-1-3-broken-access-control-vulnerability?_s_id=cve