PT-2026-122946

CVE-2026-114741

·

Published

2026-10-25

·

Updated

2026-10-25

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
CVE-2026-114741
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com