CVE Field Guide
About Us
CVE-2026-65554
PUBLISHED
WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability
Assigner:
Patchstack
Reserved:
22.07.2026
Published:
06.08.2026
Updated:
06.08.2026
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
CVSS Score:
7.1
CVSS score
7.1
Attack Vector
Network
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
None
Privileges Required
Low
Integrity Impact
High
User Interaction
None
Availability Impact
Low
CVSS 3.1
Product Status
Vendor
lattepress
Product
AnsPress – Question and answer
Versions
Default:
unaffected
Version 4.4.4 is affected
Credits
Taylsec | Patchstack Bug Bounty Program
finder
References
https://patchstack.com/database/wordpress/plugin/anspress-question-answer/vulnerability/wordpress-anspress-question-and-answer-plugin-4-4-4-broken-access-control-vulnerability?_s_id=cve
Problem Types
CWE-862 Missing Authorization
CWE
Impacts
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels