CVE-2026-39706

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Missing authorization in the Make My Trivia plugin allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 1.1.0.

Risk Assessment

An attacker could gain unauthorized access to functions or data, potentially leading to compromise of system integrity and confidentiality.

Recommendation

Update the Make My Trivia plugin to the latest version that includes a fix for the missing authorization.

Original NVD description (English source)

Missing Authorization vulnerability in Netro Systems Make My Trivia trivialy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Make My Trivia: from n/a through <= 1.1.0.