CVE-2026-40801 Wordable CVE debrief

Who should care

Wordable plugin users, particularly those with subscriber data, should assess exposure and prioritize verification.

Why it matters

A Subscriber Broken Access Control vulnerability exists in Wordable plugin versions up to 8.2.10, allowing unauthorized access to subscriber data. Wordable plugin users should assess exposure and prioritize verification.

• Verify exposure of Wordable plugin versions up to 8.2.10
• Potential unauthorized access to subscriber data

Technical summary

The Wordable plugin up to version 8.2.10 is vulnerable to Subscriber Broken Access Control. This issue allows unauthorized access to subscriber data.

Defensive priority

Defenders should verify exposure and apply patches if available.

Recommended defensive actions

• Verify exposure of Wordable plugin versions up to 8.2.10
• Apply patches if available
• Monitor for unauthorized access attempts

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the scope of affected versions and potential impact.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.