CVE-2026-39713
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
The Mailercloud WordPress plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This affects versions up to and including 1.0.7.
Risk Assessment
An attacker can gain unauthorized access to webform integration and contact synchronization features, leading to data confidentiality breaches.
Recommendation
Immediately update the Mailercloud plugin to the latest available version and verify access control configurations.
Original NVD description (English source)
Missing Authorization vulnerability in mailercloud Mailercloud – Integrate webforms and synchronize website contacts mailercloud-integrate-webforms-synchronize-contacts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mailercloud – Integrate webforms and synchronize website contacts: from n/a through <= 1.0.7.