/Vulnerability Library

WordPress Better Search < 4.5.3 - Unauthenticated Arbitrary Post Type Content Disclosure

CVE-2026-119495
Early Release

Description

WebberZone Better Search <= 4.5.2 contains a broken access control caused by incorrectly configured access control security levels, letting attackers exploit unauthorized access, exploit requires no special privileges.

Severity

Medium

CVSS Score

5.3

Exploit Probability

0%

Affected Product

better-search

Published Date

November 5, 2026

Template Author

maulanawirawan

CVE-2026-119495.yaml
5.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE ID:
cve-2026-119495
CWE ID:
cwe-862

References

https://patchstack.com/database/wordpress/plugin/better-search/vulnerability/wordpress-better-search-plugin-4-5-2-broken-access-control-vulnerabilityhttps://wordpress.org/plugins/better-search/

Remediation Steps

Update to the latest version beyond 4.5.2.