CVE-2026-27999MEDIUM NVDCVSS Score 6.5Severity MEDIUMPublished Aug 13, 2026Vendor unknownDescriptionSubscriber Broken Access Control in Tourfic <= 2.23.1 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/tourfic/vulnerability/wordpress-tourfic-plugin-2-23-1-broken-access-control-vulnerability?_s_id=cve