Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4509 articles · 259791 vulns · 37/41 feeds (7d)
← Back to list
5.3
CVE-2026-115958
WordPress · Discussion Board Plugin

WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability

Description

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0.

Affected Products

VendorProductVersions
WordPressDiscussion Board Plugin0

References

  • https://patchstack.com/database/wordpress/plugin/wp-discussion-board/vulnerability/wordpress-wp-discussion-board-plugin-2-6-0-broken-access-control-vulnerability?_s_id=cve(vdb-entry)

Related News (1 articles)

Tier C
VulDB8d ago
CVE-2026-115958 | Discussion Board Plugin up to 2.6.0 on WordPress authorization
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.15.3 MEDIUM
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA KEV❌ No
Actively exploited❌ No
CWECWE-862
PublishedOct 26, 2026
Last enriched8d agov2
Trending Score11
Source articles1
Independent1
Info Completeness8/14
Missing: epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-119977EXP
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
Trending: 84
HIGHCVE-2026-118086
WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability
Trending: 26
HIGHCVE-2026-107127
Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF
Trending: 6
HIGHCVE-2026-110523
WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect
Trending: 6
HIGHCVE-2026-107506
Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting
Trending: 6

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 26, 2026
Discovered by ZDM
Oct 26, 2026
Updated: vendor, product, affectedVersions
Oct 26, 2026

Version History

v2
Last enriched 8d ago
v2Tier C8d ago

Clarified vendor as WordPress and product as Discussion Board Plugin; specified affected versions range.

vendorproductaffectedVersions
via VulDB
v18d ago

Initial creation