CVE-2026-24570
BaseFortify
Publication date: 2026-01-23
Last updated on: 2026-04-28
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wisdmlabs | edwiser_bridge | to 4.3.2 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided resources do not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.
Can you explain this vulnerability to me?
CVE-2026-24570 is a broken access control vulnerability in the WordPress Edwiser Bridge Plugin (up to version 4.3.2). It occurs due to missing authorization, authentication, or nonce token checks in certain plugin functions, which allows unprivileged users (like subscribers or developers) to perform actions that should be restricted to higher-privileged roles. [1]
How can this vulnerability impact me? :
This vulnerability can allow users with low privileges to perform unauthorized actions reserved for higher-privileged roles. Although the severity is considered low (CVSS score 5.4) and exploitation is unlikely, it could lead to unauthorized changes or access within the affected WordPress plugin environment. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves checking for unauthorized access attempts or actions performed by low-privileged users on the Edwiser Bridge plugin functions that require higher privileges. Since the vulnerability is due to missing authorization checks, monitoring logs for unexpected privilege escalations or unusual plugin activity is recommended. Specific commands are not provided in the resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting user roles to minimize exposure, monitoring for suspicious activity, and applying any available mitigation solutions offered by Patchstack. Since no official fix or patched version is currently available, users should follow Patchstack's security intelligence updates and consider limiting plugin usage or access until a patch is released. [1]