CVE-2026-27055 PUBLISHED

WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability

Assigner: Patchstack
Reserved: 17.02.2026 Published: 19.02.2026 Updated: 19.02.2026

Missing Authorization vulnerability in PenciDesign Penci AI SmartContent Creator penci-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Penci AI SmartContent Creator: from n/a through <= 2.0.

Product Status

Vendor PenciDesign
Product Penci AI SmartContent Creator
Versions Default: unaffected
  • affected from n/a to <= 2.0 (incl.)

Credits

  • João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program finder

References

Problem Types

  • Missing Authorization CWE

Impacts

  • Exploiting Incorrectly Configured Access Control Security Levels