CVE-2026-15823

Deferred Deferred - Pending Action

Unauthorized Post Modification in Builderall Cheetah for WP

Publication date: 2026-09-10

Last updated on: 2026-09-11

Assigner: Wordfence

Description

The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable() function in versions up to, and including, 3.0.2. The wp_ajax_ba_cheetah_disable AJAX handler is registered without any capability or nonce verification, and the target post_id is sourced directly from user-controlled $_POST['ba_cheetah_data']['post_id']. This makes it possible for authenticated attackers, with Subscriber-level access and above, to disable the page builder layout on arbitrary posts by setting the _ba_cheetah_enabled post meta to false, including on posts owned by other users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-11

Generated

2026-10-01

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-29

NVD

CVE-2026-15823

EUVD

EUVD-2026-75236

Affected Vendors & Products

Vendor	Product	Version / Range
builderall	cheetah_for_wp	to 3.0.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

The Builderall Cheetah For Wp plugin for WordPress has a vulnerability where an attacker with Subscriber-level access or higher can disable the page builder layout on any post by exploiting a missing capability check. The plugin's disable() function lacks proper verification, allowing unauthorized modification of post meta data via a user-controlled input.

Detection Guidance

Check WordPress sites for the Builderall Cheetah For Wp plugin version 3.0.2 or lower. Look for unauthorized changes to post meta values where _ba_cheetah_enabled is set to false. Review server logs for suspicious AJAX requests to wp_ajax_ba_cheetah_disable with modified post_id parameters.

Impact Analysis

If exploited, this vulnerability could allow attackers to disable the page builder layout on your WordPress posts, potentially disrupting your website's design and functionality. Even posts owned by other users are at risk, which could lead to unauthorized changes and content disruption.

Compliance Impact

This vulnerability allows authenticated attackers with Subscriber-level access to modify post meta data, potentially disabling page builder layouts on arbitrary posts. While not directly causing data breaches, unauthorized modifications could impact data integrity and access controls, which may violate GDPR's integrity and confidentiality principles or HIPAA's integrity requirements for protected health information.

Mitigation Strategies

Update the Builderall Cheetah For Wp plugin to the latest version. Remove or restrict Subscriber-level access to prevent unauthorized modifications. Implement nonce verification for AJAX handlers and add capability checks to critical functions.

Hi! I’m here to help you understand CVE-2026-15823. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70