CVE-2026-57782
Received Received - Intake

BaseFortify

Publication date: 2026-07-13

Last updated on: 2026-07-13

Assigner: Patchstack

Description
Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Universal Clocks: from n/a through <= 1.2.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-13
Last Modified
2026-07-13
Generated
2026-07-13
AI Q&A
2026-07-13
EPSS Evaluated
N/A
NVD
CVE-2026-57782
EUVD
EUVD-2026-43400

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
press_tigers universal_clocks From 1.2.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-57782 is a Broken Access Control vulnerability in the WordPress Universal Clocks Plugin versions 1.2.0 and below. It occurs because of missing authorization, authentication, or nonce token checks, which allows unauthenticated users to perform actions that should require higher privileges.

This vulnerability is classified under OWASP Top 10 A1: Broken Access Control and has a CVSS score of 5.3, indicating a low severity impact.

Impact Analysis

This vulnerability allows unauthenticated users to perform higher-privileged actions within the Universal Clocks plugin. This could lead to unauthorized changes or actions being executed without proper permissions.

Although the risk of exploitation is considered low, it still poses a security risk by potentially allowing attackers to bypass access controls and manipulate plugin functionality.

Immediate action is recommended, such as updating the plugin or consulting with a hosting provider or web developer to mitigate the risk.

Detection Guidance

There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.

Mitigation Strategies

Immediate mitigation steps include updating the WordPress Universal Clocks Plugin to a patched version if available.

Since no official patch or patched version is specified, it is recommended to seek assistance from your hosting provider or a web developer to implement proper access control measures.

Taking these actions can help prevent unauthenticated users from performing higher-privileged actions due to missing authorization checks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57782. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart