UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-127215

Kanbanz WordPress Plugin < 1.0.3 Broken Access Control via admin-ajax Handlers

Severity
High 8.6
Published
13 Nov 2026
Last changed
13 Nov 2026
Added to UpHeron
13 Nov 2026
Fixed in
1.0.3
Weakness
Authorization bypass through a user-controlled key (IDOR) (CWE-639)
Attack
Over the network · Needs a user account · No user action needed
Attacker can
Read data · Change data
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Sources
CVE Program

Description

Kanbanz by Softaculous plugin for WordPress before 1.0.3 contains a broken access control vulnerability that allows authenticated Kanban Staff users to access and modify boards they are not members of by exploiting admin-ajax handlers that fail to call kanbanz_user_can_access_board() or per-task edit checks on attacker-supplied board_id or task_id parameters. Attackers can supply arbitrary board IDs to read sensitive task data, overwrite status columns, subtasks, and labels, inject comments, upload or delete attachments, and create tasks or set WIP limits on boards owned by other teams.

From the CVE Program.

Affected software

SoftwareAffected versions
Kanbanz (WordPress plugin)WordPress plugins · wp-plugin:kanbanz
  • Every version before 1.0.3

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-127215