4.3
Moyenne
CVE-2026-3906 WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1
Description
WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1. The Notes feature (block-level collaboration annotations) was introduced in WordPress 6.9 to allow editorial comments directly on posts in the block editor. However, the REST API `create_item_permissions_check()` method in the comments controller did not verify that the authenticated user has `edit_post` permission on the target post when creating a note. This makes it possible for authenticated attackers with Subscriber-level access to create notes on any post, including posts authored by other users, private posts, and posts in any status.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WordPress 6.9 | 6.9 → 6.9.1 | Pas de correctif indiqué |
Références
- www.wordfence.com www.wordfence.com
- core.trac.wordpress.org core.trac.wordpress.org
- core.trac.wordpress.org core.trac.wordpress.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de WordPress
Les 8 CVE de WordPress →
CVE-2026-119977
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
8.1
Élevée
CVE-2026-114570
WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2…
4.9
Moyenne
CVE-2022-4973
WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be…
4.9
Moyenne
CVE-2024-6307
WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to…
6.4
Moyenne