Medium · 4.3 CVE-2026-45442 EUVD-2026-30885GHSA-wx8m-hccf-5xj4

WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability

Published May 19, 2026 · Updated May 19, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Presto Player: from n/a through 4.1.3.

Vendor	Product	Affected	Fixed
Brainstorm Force	Presto Player	≤ 4.1.3	—