What is GHSA-jgxg-6f9p-7gm5?

GHSA-jgxg-6f9p-7gm5 is a security advisory published by GitHub Security Advisories with Low severity. The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when...

Which CVE IDs does GHSA-jgxg-6f9p-7gm5 cover?

GHSA-jgxg-6f9p-7gm5 covers the following CVE IDs: CVE-2026-114742. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jgxg-6f9p-7gm5?

GHSA-jgxg-6f9p-7gm5 has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-jgxg-6f9p-7gm5LowCVSS 2.7

The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when...

Vendor

GitHub Security Advisories

Published

October 25, 2026

Last Modified

October 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-114742 →

📋 Description

The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing users with contributor-level access and above to modify, reconfigure and publish tours created by other users.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-114742
https://wpscan.com/vulnerability/201b0ca5-366d-446e-a92f-6962cd200bd7
https://github.com/advisories/GHSA-jgxg-6f9p-7gm5