High · 7.5 CVE-2026-54837 EUVD-2026-39680GHSA-p896-xrwf-h8qr

WordPress Intranet & Private Site – All-In-One Intranet plugin <= 1.8.1 - Broken Access Control vulnerability

Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack

Description

Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions.

Vendor	Product	Affected	Fixed
Syed Balkhi	Intranet & Private Site – All-In-One Intranet	≤ 1.8.1	—