CVE-2026-39588
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
The NM Gift Registry and Wishlist Lite plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 5.13.
Risk Assessment
An unauthorized user can modify wish lists or gift registries, potentially leading to privacy breaches and data manipulation.
Recommendation
It is recommended to update the NM Gift Registry and Wishlist Lite plugin to the latest version that fixes this vulnerability.
Original NVD description (English source)
Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through <= 5.13.