CVE-2026-57720

Missing Authorization vulnerability in Codexpert Inc ThumbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThumbPress: from n/a through 6.3.2.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - audit@patchstack.com

Published

2026-07-01

Last modified

2026-10-25

Weaknesses

CWE-862

Affected products

• Thumbpress (Codexpert Inc)

References

• https://patchstack.com/database/wordpress/plugin/image-sizes/vulnerability/wordpress-thumbpress-plugin-6-3-2-broken-acc…