CVE-2026-54837

Unauthenticated Broken Access Control in Intranet &amp; Private Site &#8211; All-In-One Intranet <= 1.8.1 versions.

Score

CVSS 3.1 7.5 High

Status

Deferred - audit@patchstack.com

Published

2026-06-26

Last modified

2026-10-25

Weaknesses

CWE-862

Affected products

• Intranet Amp Private Site 8211 All-in-one Intranet (Syed Balkhi)

References

• https://patchstack.com/database/wordpress/plugin/all-in-one-intranet/vulnerability/wordpress-intranet-private-site-all-…