Medium · 5.3 CVE-2026-27434 EUVD-2026-94260GHSA-jxc3-4pxh-5qjw

WordPress WP Rentals theme <= 3.14.2 - Broken Access Control vulnerability

Published Oct 7, 2026 · Updated Oct 7, 2026 · Assigned by Patchstack

Vendor: sc Internet Vivoo Product: WP Rentals

Description

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2.

Affected products

Vendor	Product	Affected	Fixed
sc Internet Vivoo	WP Rentals	≤ 3.14.2	—

References

https://patchstack.com/database/wordpress/theme/wprentals/vulnerability/wordpress-wp-rentals-theme-3-14-2-broken-access-control-vulnerability?_s_id=cve vdb-entry