CVE-2026-105062: Missing Authorization in Brandtoss WP Admin Audit

This vulnerability in Brandtoss WP Admin Audit (versions >=0 <1.2.18) involves missing authorization checks, leading to incorrect access control configurations. This could allow an attacker with low privileges to access audit-related administrative functions without proper authorization. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, limited confidentiality impact, and no integrity or availability impact.

The vulnerability could allow an attacker with low privileges to gain unauthorized access to audit administrative functions, potentially exposing some confidential information. There is no impact on integrity or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's announcements for updates and consider restricting access to the plugin's administrative features until a fix is available.