CVE-2026-39627

MediumCVSS 4.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Missing Authorization vulnerability in wproyal Ashe allows exploiting incorrectly configured access control security levels. This issue affects Ashe from n/a through <= 2.266.

Risk Assessment

Unauthorized users may gain access to functions or data that should be protected, potentially leading to information disclosure or unauthorized actions.

Recommendation

Update the Ashe plugin to the latest available version that includes a fix.

Original NVD description (English source)

Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through <= 2.266.