Description
Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fahad Mahmood | WP Sort Order | ≤ 1.3.5 | — |
High · 7.5
CVE-2026-28567
EUVD-2026-60892GHSA-fr2v-9mf5-f6x8
WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack