EUVD-2026-75971
GHSA-6v38-qwxj-3wr2
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
Contributor is a low-privilege WordPress role (PR:L not PR:H); confidentiality is low as private draft content can be read; integrity is high due to arbitrary content overwrite capability.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
6DescriptionCVE.org
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts.
AnalysisAI
Broken object-level authorization in the Visualizer WordPress plugin before 4.0.6 allows any authenticated user holding at least the Contributor role to publish, rename, and overwrite posts and pages belonging to other users - including private drafts they would normally have no access to. The flaw stems from chart-building AJAX/REST actions that do not verify post ownership before acting on the supplied post identifier. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated WordPress account at the Contributor role or above - guest/subscriber accounts cannot exploit this flaw. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The supplied CVSS vector (CVSS:3.1/AV:N/AC:L/PR:H/UI:N) designates PR:H - high privileges - but the description explicitly states exploitation is possible at the Contributor role, one of the lowest authenticated roles in WordPress. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade the Visualizer WordPress plugin to version 4.0.6 or later, which is confirmed to resolve the authorization deficiency per the vendor patch. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Visualizer
View allA blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-d
Server-Side Request Forgery in the Visualizer WordPress plugin before 4.0.6 allows any authenticated Contributor-level u
Insufficient authorization in the Visualizer WordPress plugin before 4.0.7 permits any authenticated Contributor-level u
A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute ar
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrust
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualiz
SQL injection in the Visualizer WordPress plugin (versions 4.0.6 and earlier) allows an authenticated user holding only
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualiz
Broken object-level authorization in the Visualizer WordPress plugin before 4.0.6 allows any authenticated Contributor-l
Stored XSS in the Themeisle Visualizer WordPress plugin (all versions before 4.0.0) allows an authenticated low-privileg
Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor pat
Missing authorization on three AJAX handlers in the Visualizer: Tables and Charts Manager plugin for WordPress (by Theme
Share
External POC / Exploit Code
Leaving vuln.today