Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-39639 EUVD-2026-20298GHSA-8mj5-q5fc-rjx2

WordPress RPS Include Content plugin <= 1.2.2 - Broken Access Control vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: redpixelstudios Product: RPS Include Content

Description

Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RPS Include Content: from n/a through <= 1.2.2.

Affected products

VendorProductAffectedFixed
redpixelstudios RPS Include Content ≤ 1.2.2 —

References