CVE-2026-39639
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
The RPS Include Content plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects all versions from n/a through 1.2.2.
Risk Assessment
An attacker can gain unauthorized access to content inclusion functions, potentially leading to malicious content injection or privilege escalation.
Recommendation
Immediately update the RPS Include Content plugin to the latest version and verify access control configuration.
Original NVD description (English source)
Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RPS Include Content: from n/a through <= 1.2.2.