What is the CVSS score of EUVD-2026-22883?

EUVD-2026-22883 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Magazine Blocks EUVD-2026-22883

Q: Which versions of Magazine Blocks are affected by EUVD-2026-22883?

An authorization bypass in BlockArt Magazine Blocks for WordPress (≤1.8.3) lets authenticated users with lower privileges perform unauthorized data modifications.

| CVE-2026-40728 MEDIUM

Missing Authorization (CWE-862)

2026-04-15 Patchstack

WordPress Authentication Bypass Magazine Blocks Wordpress Plugin

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:38 vuln.today

CVSS changed

Apr 15, 2026 - 16:22 NVD

4.3 (MEDIUM)

EUVD ID Assigned

Apr 15, 2026 - 10:45 euvd

EUVD-2026-22883

CVE Published

Apr 15, 2026 - 10:21 nvd

MEDIUM 4.3

DescriptionCVE.org

Missing Authorization vulnerability in BlockArt Magazine Blocks magazine-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Magazine Blocks: from n/a through <= 1.8.3.

AnalysisAI

An authorization bypass in BlockArt Magazine Blocks for WordPress (≤1.8.3) lets authenticated users with lower privileges perform unauthorized data modifications. The vulnerability is not known to be actively exploited, and exploitation probability is assessed as low (EPSS 0.02%). The issue stems from missing capability checks that allow modified data access without proper permission verification.