CVE-2026-107770

Published: Ott 16, 2026 Last Modified: Ott 16, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,8
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: high
Availability: high

Description

AI Translation Available

The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary media attachments via wp_delete_attachment and upload new attachments to the site, actions that require the upload_files or edit_others_posts capabilities. A Subscriber-level user can obtain their own wplr_auth_token directly from the profile.php page source, because the admin screen guard in Meow_WPLR_Sync_Admin::__construct() is commented out, causing wp_localize_script to leak the token into every admin page view; this token can then be used from a cookie-less HTTP session to invoke destructive actions on the /?wplr-sync-api endpoint.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0046
Percentile
0,4th
Updated

EPSS Score Trend (Last 4 Days)

862

Missing Authorization

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Access Control Availability
Potential Impacts:
Read Application Data Read Files Or Directories Modify Application Data Modify Files Or Directories Gain Privileges Or Assume Identity Bypass Protection Mechanism Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other)
Applicable Platforms
Technologies: AI/ML, Web Server, Database Server, Not Technology-Specific
Likelihood of Exploit: High
View CWE Details
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/admin.p…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/admin.p…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6…
https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/core.ph…
https://plugins.trac.wordpress.org/changeset/3737477/wplr-s…
https://plugins.trac.wordpress.org/changeset/3737477/wplr-sync
https://plugins.trac.wordpress.org/changeset/3737477/wplr-s…
https://plugins.trac.wordpress.org/changeset/3737477/wplr-sync/trunk/classes/ap…
https://www.wordfence.com/threat-intel/vulnerabilities/id/2…
https://www.wordfence.com/threat-intel/vulnerabilities/id/2f32c361-9bb3-417b-a5…