Medium · 4.3 CVE-2026-24543 EUVD-2026-4378GHSA-9646-v778-vv65

WordPress Materialis Companion plugin <= 1.3.52 - Broken Access Control vulnerability

Published Jan 23, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Horea Radu Product: Materialis Companion

Description

Missing Authorization vulnerability in Horea Radu Materialis Companion materialis-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Materialis Companion: from n/a through <= 1.3.52.

Affected products

Vendor	Product	Affected	Fixed
Horea Radu	Materialis Companion	≤ 1.3.52	—

References

https://patchstack.com/database/Wordpress/Plugin/materialis-companion/vulnerability/wordpress-materialis-companion-plugin-1-3-52-broken-access-control-vulnerability?_s_id=cve vdb-entry