CVE-2026-7726
Received Received - Intake

Unauthenticated HTTP Request in WPBakery Layouts Plugin

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: Wordfence

Description
The Layouts for WPBakery plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on the `Layouts_WPB_Remote::template_sync()` callback registered via `wp_ajax_nopriv_handle_sync` in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to force the WordPress server to issue outbound HTTP requests to the plugin vendor's external API (`https://www.layoutsforwpbakery.com/wp-json/layoutsforwpbakery/v1/{templates,categories}`) and to write the JSON-decoded responses verbatim into the site's `wp_options` table via `set_transient()` — at any rate the attacker chooses, with no nonce verification, capability check, or rate limiting.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-05
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-7726
EUVD
EUVD-2026-53172

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
layouts_for_wpbakery layouts_for_wpbakery_plugin to 1.1.3 (inc)
layouts_for_wpbakery layouts_for_wpbakery to 1.1.3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Layouts for WPBakery plugin for WordPress has a vulnerability due to a missing capability check in the `Layouts_WPB_Remote::template_sync()` function. This allows unauthenticated attackers to force the WordPress server to make outbound HTTP requests to the plugin's external API and write responses into the site's `wp_options` table without any restrictions.

Detection Guidance

Check for unauthorized entries in the wp_options table in your WordPress database, particularly those related to the Layouts for WPBakery plugin. Look for recent changes or unexpected HTTP requests to https://www.layoutsforwpbakery.com/wp-json/layoutsforwpbakery/v1/{templates,categories}.

Impact Analysis

This vulnerability could allow attackers to make unauthorized outbound requests from your server and modify your WordPress site's database by injecting data into the `wp_options` table. This may lead to site defacement, data corruption, or further exploitation of your server resources.

Compliance Impact

This vulnerability could impact compliance by allowing unauthorized data exfiltration or modification of site settings, potentially violating data integrity and confidentiality requirements under GDPR or HIPAA. Uncontrolled outbound requests may also expose sensitive server information.

Mitigation Strategies

Update the Layouts for WPBakery plugin to version 1.1.4 or later, which includes security fixes. If updating is not immediately possible, consider disabling the plugin until the update can be applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-7726. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart