CVE-2026-57797
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
The EduMall WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 4.5.1.
Risk Assessment
An attacker can gain unauthorized access to administrative functions or sensitive data, potentially leading to privilege escalation and system integrity compromise.
Recommendation
It is recommended to immediately update the EduMall plugin to the latest available version that fixes this vulnerability. Also review the access control configuration.
Other vulnerabilities in EduMall
See all- CVE-2026-39748High
A vulnerability in the EduMall theme up to version 4.5.3 allows an unauthenticated attacker to perform cross-site scripting (XSS).
- CVE-2025-59564High
The EduMall theme by ThemeMove has a PHP Local File Inclusion vulnerability due to improper filename control in include/require statements. Affects versions up to 4.4.5 (exclusive).
Original NVD description (English source)
Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduMall: from n/a through <= 4.5.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS