Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-39588 EUVD-2026-20229GHSA-3xmw-f5q8-mw2q

WordPress NM Gift Registry and Wishlist Lite plugin <= 5.13 - Broken Access Control vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through <= 5.13.

Affected products

VendorProductAffectedFixed
nmerii NM Gift Registry and Wishlist Lite ≤ 5.13 —

References