What is the CVSS score of EUVD-2026-48102?

EUVD-2026-48102 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.3%.

Query Wrangler EUVD-2026-48102

Q: Which versions of Query Wrangler are affected by EUVD-2026-48102?

Broken access control in Query Wrangler WordPress plugin version 1.5.57 and earlier allows authenticated subscriber-level users to access restricted functionality beyond their intended permissions.

| CVE-2026-65491 MEDIUM

Missing Authorization (CWE-862)

2026-07-23 Patchstack

GHSA-qv9p-x543-gh36

Authentication Bypass Query Wrangler

4.3

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Network-reachable plugin endpoint requires subscriber auth (PR:L); no integrity or availability impact; scope unchanged per WordPress plugin sandbox model.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 13:19 vuln.today

DescriptionCVE.org

Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.

AnalysisAI

Broken access control in Query Wrangler WordPress plugin version 1.5.57 and earlier allows authenticated subscriber-level users to access restricted functionality beyond their intended permissions. The CWE-862 (Missing Authorization) root cause indicates the plugin fails to verify whether the requesting user holds sufficient privileges before executing sensitive operations. No active exploitation is confirmed in CISA KEV, and CVSS rates this a medium-severity (4.3) network-exploitable issue with limited confidentiality impact and no integrity or availability consequence.

Technical ContextAI

Query Wrangler (CPE: cpe:2.3:a:jonathan_daggerhart:query_wrangler:*:*:*:*:*:*:*:*) is a WordPress plugin authored by Jonathan Daggerhart that enables site administrators to build and display custom WP_Query-based content listings. The vulnerability class is CWE-862 (Missing Authorization), meaning one or more plugin endpoints or AJAX actions fail to perform capability checks before processing requests. In WordPress, subscriber is the lowest authenticated role, granting minimal permissions. When authorization gates are absent, a subscriber can reach admin-intended functionality - in this case, yielding limited read access to data or plugin state that should be restricted.

RemediationAI

Update the Query Wrangler plugin to a version newer than 1.5.57 via the WordPress plugin dashboard or the WordPress.org plugin repository. The Patchstack advisory at https://patchstack.com/database/wordpress/plugin/query-wrangler/vulnerability/wordpress-query-wrangler-plugin-1-5-57-broken-access-control-vulnerability should be consulted for the confirmed patched release version, which is not independently confirmed in the current dataset. As a compensating control pending patching, administrators should disable public user registration (Settings > General > Membership) to eliminate the unauthenticated-to-subscriber escalation path, accepting the trade-off that legitimate registration flows will be blocked. Alternatively, restrict subscriber-role activity using a role management plugin to reduce exposed attack surface.