CVE-2026-27434: Missing Authorization in sc Internet Vivoo WP Rentals

This vulnerability in WP Rentals (sc Internet Vivoo) stems from missing authorization checks, enabling exploitation of improperly configured access control security levels. It affects versions from initial release through 3.14.2. The CVSS 3.1 score is 5.3, indicating a medium severity issue with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts integrity but not confidentiality or availability.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions due to missing authorization controls, impacting the integrity of the affected system. There is no impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Users should monitor vendor communications for updates and apply any forthcoming patches promptly.