CVE-2026-19775

MediumCVSS 4.3

Published: 25/09/2026(UTC)Updated: 25/09/2026(UTC)Translated: 25/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Summary

The OpenStation plugin for WordPress (versions up to and including 1.1.7) is vulnerable to authorization bypass. Due to improper verification of user authorization, an authenticated attacker with custom-level access can read the title, status, date, permalink, and a 300-character content excerpt of any private, draft, pending, or future post, as well as the content and AI-moderation verdicts of unapproved and spam comments.

Risk Assessment

An attacker with basic permissions can access sensitive information such as private posts and comments, potentially leading to a breach of data confidentiality.

Recommendation

Update the OpenStation plugin to a version newer than 1.1.7 as soon as a fix is available, and in the meantime consider restricting access to the /openstation/ portal.

Other vulnerabilities in OpenStation WordPress Plugin

CVE-2026-109592Medium
The OpenStation plugin for WordPress (all versions up to and including 1.1.16) is vulnerable to authorization bypass due to improper verification of user authorization. This allows authenticated attackers with subscriber-level access and above to modify arbitrary other users' placement rows and read serialized metadata. Exploitation requires at least one orphaned placement to exist and the attacker to self-enable OpenStation.

Original NVD description (English source)

The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to read the title, status, date, permalink, and a 300-character content excerpt of any private, draft, pending, or future post, as well as the content and AI-moderation verdicts of unapproved and spam comments. Any authenticated user with the 'read' capability can self-enable the required AI feature by visiting the /openstation/ portal and toggling their own ai.enabled setting via the POST /desktop-mode/v1/os-settings endpoint, removing any practical barrier to exploitation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS