CVE-2026-97282

MediumCVSS 5.3

Published: 30/09/2026(UTC)Updated: 30/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Summary

The Review Schema plugin in versions up to and including 3.1.0 contains an Insecure Direct Object References (IDOR) vulnerability accessible without authentication. An unauthenticated attacker can access objects they should not have access to.

Risk Assessment

An unauthorized person may read or modify other users' data, potentially leading to a breach of data confidentiality and integrity.

Recommendation

Update the Review Schema plugin to a version later than 3.1.0 to remove the IDOR vulnerability.

Other vulnerabilities in Review Schema

CVE-2026-97280Medium
Missing Authorization vulnerability in Review Schema version 3.1.0 allows exploitation of incorrectly configured access control security levels.

Original NVD description (English source)

Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS