Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-39569 EUVD-2026-20215GHSA-mrpg-59p9-vgrh

WordPress 12 Step Meeting List plugin <= 3.19.9 - Broken Access Control vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: AA Web Servant Product: 12 Step Meeting List

Description

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through <= 3.19.9.

Affected products

VendorProductAffectedFixed
AA Web Servant 12 Step Meeting List ≤ 3.19.9 —

References