Unrated severityNVD Advisory· Published Nov 7, 2026
CVE-2026-121492
CVE-2026-121492
Description
The Fiber Admin WordPress plugin before 4.0.1 does not have authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the order of arbitrary posts, including drafts, private posts and navigation menu items, as well as the order of taxonomy terms when term ordering is enabled.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <4.0.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.