Description
Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Beplusthemes | Sermon'e | ≤ 1.0.2 | — |
High · 7.5
CVE-2026-48199
EUVD-2026-93062GHSA-49gp-xp7v-j798
WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerability
Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack