CVE-2026-3279: CWE-862 Missing Authorization in clorith Enable jQuery Migrate Helper
The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` function in all versions up to, and including, 1.4.1. This is due to the function only verifying a nonce without checking user capabilities. This makes it possible for authenticated attackers, with Subscriber-level access and above, to downgrade the site-wide jQuery version from 3.7.1 to the legacy 1.12.4-wp release, which has knowns security vulnerabilities.
AI Analysis
Technical Summary
CVE-2026-3279 is a missing authorization vulnerability (CWE-862) in the Enable jQuery Migrate Helper WordPress plugin. The downgrade_jquery_version() function lacks a capability check and only verifies a nonce, enabling authenticated users with low privileges (Subscriber and above) to downgrade the jQuery version site-wide from 3.7.1 to 1.12.4-wp. This downgrade exposes the site to security risks inherent in the legacy jQuery version. The vulnerability is present in all plugin versions up to 1.4.1. The CVSS 3.1 base score is 6.5 (medium severity) with network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No patch or official fix has been documented.
Potential Impact
An attacker with authenticated access at Subscriber level or higher can downgrade the jQuery library used by the WordPress site to a legacy version with known security issues. This can lead to integrity violations by enabling the attacker to modify site behavior or data through the downgraded jQuery version. There is no direct confidentiality or availability impact reported. No known exploits are currently observed in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict user roles and permissions to trusted users only, as the vulnerability requires authenticated access with Subscriber-level privileges or higher. Monitor for updates from the plugin vendor or WordPress security channels for official patches or temporary mitigations.
CVE-2026-3279: CWE-862 Missing Authorization in clorith Enable jQuery Migrate Helper
Description
The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` function in all versions up to, and including, 1.4.1. This is due to the function only verifying a nonce without checking user capabilities. This makes it possible for authenticated attackers, with Subscriber-level access and above, to downgrade the site-wide jQuery version from 3.7.1 to the legacy 1.12.4-wp release, which has knowns security vulnerabilities.
CVSS v3.1
Score 6.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-3279 is a missing authorization vulnerability (CWE-862) in the Enable jQuery Migrate Helper WordPress plugin. The downgrade_jquery_version() function lacks a capability check and only verifies a nonce, enabling authenticated users with low privileges (Subscriber and above) to downgrade the jQuery version site-wide from 3.7.1 to 1.12.4-wp. This downgrade exposes the site to security risks inherent in the legacy jQuery version. The vulnerability is present in all plugin versions up to 1.4.1. The CVSS 3.1 base score is 6.5 (medium severity) with network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No patch or official fix has been documented.
Potential Impact
An attacker with authenticated access at Subscriber level or higher can downgrade the jQuery library used by the WordPress site to a legacy version with known security issues. This can lead to integrity violations by enabling the attacker to modify site behavior or data through the downgraded jQuery version. There is no direct confidentiality or availability impact reported. No known exploits are currently observed in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict user roles and permissions to trusted users only, as the vulnerability requires authenticated access with Subscriber-level privileges or higher. Monitor for updates from the plugin vendor or WordPress security channels for official patches or temporary mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Wordfence
- Date Reserved
- 2026-02-26T16:20:26.575Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a16a557e29bf47b50a6406b
Added to database: 5/27/2026, 8:03:35 AM
Last enriched: 5/27/2026, 8:34:03 AM
Last updated: 5/29/2026, 4:54:28 AM
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.