CVE-2026-39680
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Missing authorization in the Diet Calorie Calculator plugin (diet-calorie-calculator) allows exploiting incorrectly configured access control security levels. The vulnerability affects versions up to 1.1.1 inclusive.
Risk Assessment
Unauthorized users may gain access to functions or data that should be protected, potentially leading to confidentiality or integrity breaches.
Recommendation
It is recommended to update the Diet Calorie Calculator plugin to the latest available version that fixes this vulnerability.
Original NVD description (English source)
Missing Authorization vulnerability in MWP Development Diet Calorie Calculator diet-calorie-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Diet Calorie Calculator: from n/a through <= 1.1.1.