PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-114176 DigitalME CVE debrief

The CVE-2026-114176 vulnerability affects WordPress eRoom plugin versions up to 1.7.1, allowing Exploiting Incorrectly Configured Access Control Security Levels due to a Missing Authorization issue. This Medium-severity vulnerability, with a CVSS score of 4.3, may lead to unintended information disclosure or modification. Defenders should verify the plugin version, review access control configurations, and update to a version beyond 1.7.1 if possible. The CVE record and source item provide details, but there is limited information on potential exploits or impacts. Verification of access control configurations and updating the plugin are crucial to prevent potential security The eR

Vendor
DigitalME
Product
eRoom
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-21
Original CVE updated
2026-10-22
Advisory published
2026-10-21
Advisory updated
2026-10-22

Who should care

Defenders responsible for WordPress installations with the eRoom plugin should assess exposure and prioritize remediation. This includes administrators and security teams managing WordPress environments.

Why it matters

CVE-2026-114176 is a Medium-severity vulnerability in the WordPress eRoom plugin that requires verification of access control configurations and potentially updating the plugin version.

  • Verification of access control configurations for the eRoom plugin is necessary to prevent potential security incidents.
  • Defenders should assess the version of the eRoom plugin in use and update to a version beyond 1.7.1 if possible.
  • Reviewing and adjusting access control settings for the plugin can help mitigate potential risks.

Technical summary

The WordPress eRoom plugin, specifically versions up to 1.7.1, is vulnerable to a Missing Authorization issue. This allows for Exploiting Incorrectly Configured Access Control Security Levels, potentially leading to unintended information disclosure or modification.

Defensive priority

Defenders should prioritize verifying the version of the eRoom plugin in use and ensuring it is updated to a version beyond 1.7.1 if possible. They should also review access control configurations for the plugin.

Recommended defensive actions

  • Verify the version of the eRoom plugin in use
  • Update the eRoom plugin to a version beyond 1.7.1 if possible
  • Review access control configurations for the plugin

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description and affected versions. However, there is limited information on potential exploits or impacts.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-114176 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-114176

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-114176 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-114176

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.