CVE-2026-1881: CWE-639 Authorization Bypass Through User-Controlled Key in broadstreetads Broadstreet
The Broadstreet WordPress plugin up to version 1. 52. 2 contains an authorization bypass vulnerability due to insecure direct object reference in the get_sponsored_meta AJAX action. This flaw allows authenticated users with Subscriber-level access or higher to access private post metadata without proper validation of a user-controlled key. The vulnerability has a medium severity with a CVSS score of 4. 3. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
AI Analysis
Technical Summary
CVE-2026-1881 is an authorization bypass vulnerability (CWE-639) in the Broadstreet WordPress plugin affecting all versions up to 1.52.2. The issue arises from missing validation on a user-controlled key in the get_sponsored_meta AJAX action, enabling authenticated users with low privileges (Subscriber or above) to disclose private post metadata. The vulnerability is network exploitable with low attack complexity and does not require user interaction. Confidentiality impact is limited to information disclosure; integrity and availability are not affected. No vendor patch or official remediation level is documented as of the publication date.
Potential Impact
An attacker with at least Subscriber-level access to a WordPress site using the vulnerable Broadstreet plugin can disclose private post metadata that should otherwise be restricted. This could lead to unauthorized exposure of sensitive information stored in post metadata. There is no indication of impact on data integrity or availability. No known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, site administrators should consider restricting Subscriber-level access or disabling the Broadstreet plugin if private post metadata confidentiality is critical. Monitoring for updates from the vendor is recommended.
CVE-2026-1881: CWE-639 Authorization Bypass Through User-Controlled Key in broadstreetads Broadstreet
Description
The Broadstreet WordPress plugin up to version 1. 52. 2 contains an authorization bypass vulnerability due to insecure direct object reference in the get_sponsored_meta AJAX action. This flaw allows authenticated users with Subscriber-level access or higher to access private post metadata without proper validation of a user-controlled key. The vulnerability has a medium severity with a CVSS score of 4. 3. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-1881 is an authorization bypass vulnerability (CWE-639) in the Broadstreet WordPress plugin affecting all versions up to 1.52.2. The issue arises from missing validation on a user-controlled key in the get_sponsored_meta AJAX action, enabling authenticated users with low privileges (Subscriber or above) to disclose private post metadata. The vulnerability is network exploitable with low attack complexity and does not require user interaction. Confidentiality impact is limited to information disclosure; integrity and availability are not affected. No vendor patch or official remediation level is documented as of the publication date.
Potential Impact
An attacker with at least Subscriber-level access to a WordPress site using the vulnerable Broadstreet plugin can disclose private post metadata that should otherwise be restricted. This could lead to unauthorized exposure of sensitive information stored in post metadata. There is no indication of impact on data integrity or availability. No known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, site administrators should consider restricting Subscriber-level access or disabling the Broadstreet plugin if private post metadata confidentiality is critical. Monitoring for updates from the vendor is recommended.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Wordfence
- Date Reserved
- 2026-02-04T12:39:42.839Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a0e6b7aba1db47362ee5e2b
Added to database: 5/21/2026, 2:18:34 AM
Last enriched: 5/21/2026, 2:33:28 AM
Last updated: 5/21/2026, 5:35:40 AM
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.