CVE-2026-34903

MEDIUM NVD

CVSS Score 5.4

Severity MEDIUM

Published Apr 07, 2026

Vendor unknown

Description

Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ocean Extra: from n/a through 2.5.3.

References

https://patchstack.com/database/wordpress/plugin/ocean-extra/vulnerability/wordpress-ocean-extra-plugin-2-5-3-broken-access-control-vulnerability?_s_id=cve