CVE-2026-27344

WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through <= 1.0.5.

Affected

inseriswiss · inseri core

CVSS v3.1 PATCHSTACK

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.33% chance of exploitation in the next 30 days, 24th percentile

Published

2026-03-05

Updated

2026-04-28

Proof-of-concept exploits (1)

• AC8999/CVE-2026-273440★ · 2026-08-12

References

• CVE Record
• NVD entry

Related

• CVE-2009-3999
• CVE-2018-9276
• CVE-2024-40453
• CVE-2025-24071
• CVE-2025-27636
• CVE-2025-32463