PatchSiren

WordLift Srl CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM WordLift Srl CVE published 2026-10-15

CVE-2026-110891

A Missing Authorization vulnerability in WordLift plugin for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordLift plugin versions from n/a through 3.54.15. The vulnerability could potentially allow unauthorized access to WordPress deployments. Defenders should assess exposure and prioritize updating to version 3.54.17 or later. The CVE record and s [truncated]