Description
Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Anders Norén | Chaplin | ≤ 2.6.8 | — |
High · 7.5
CVE-2026-74021
EUVD-2026-63328GHSA-qmwx-j4xp-5vx8
WordPress Chaplin theme <= 2.6.8 - Broken Access Control vulnerability
Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack