Medium · 4.3 CVE-2026-24545 EUVD-2026-31746GHSA-5359-frvq-63mr

WordPress QR Redirector plugin <= 2.0.3 - Broken Access Control vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects QR Redirector: from n/a through 2.0.3.

Vendor	Product	Affected	Fixed
Nikki Blight	QR Redirector	≤ 2.0.3	—