CVE Catalog
CVE-2026-45436
MediumCVSS 6.5Summary
There is a broken access control issue in WPBakery Page Builder versions up to 8.7.2 that may allow unauthorized users to access subscriber resources.
Risk Assessment
Organizations may be exposed to unauthorized access to subscriber data, potentially leading to information leaks and privacy violations.
Recommendation
It is recommended to update WPBakery Page Builder to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions.