Vulnerabilities

TI-2026-68946 CVE-2026-27434 · GHSA-jxc3-4pxh-5qjw

WordPress WP Rentals theme Broken Access Control

LOW 29

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00176 Published 2026-10-07 No fix listed CWE-862

TI-2026-21844 CVE-2026-27432 · GHSA-hfvc-f2r4-5ww6

WordPress WP Rentals theme < 3.16.0 - Insecure Direct Object References (IDOR) vulnerability

LOW 24

Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00314 Published 2026-09-04 Fixed in 3.16.0 CWE-639

TI-2026-28501 CVE-2026-39527 · GHSA-6cfj-rmrx-95m5

WordPress WpStream plugin < 4.11.2 - Arbitrary File Upload vulnerability

LOW 24

Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00291 Published 2026-06-15 Fixed in 4.11.2 CWE-434

Vulnerabilities

Filters

WordPress WP Rentals theme Broken Access Control

WordPress WP Rentals theme < 3.16.0 - Insecure Direct Object References (IDOR) vulnerability

WordPress WpStream plugin < 4.11.2 - Arbitrary File Upload vulnerability