PT-2026-122947

CVE-2026-114742

·

Published

2026-10-25

·

Updated

2026-10-25

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing users with contributor-level access and above to modify, reconfigure and publish tours created by other users.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
CVE-2026-114742
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com