The vulnerability identified as CVE-2026-39607 affects the Wpbens Filter Plus plugin through version 1.1.17. It is due to missing authorization controls, which means that certain actions or data may be accessible without proper permission checks. The CVSS 3.1 base score is 5.4 (medium), with an attack vector of network, low attack complexity, requiring low privileges, no user interaction, and impacting confidentiality and integrity but not availability. No vendor advisory or patch information is currently available, and no exploits are known in the wild.

An attacker with low privileges can exploit this missing authorization vulnerability to access or modify data beyond their intended permissions, potentially leading to limited confidentiality and integrity breaches. There is no indication of impact on system availability. Since no known exploits exist in the wild, the immediate risk appears moderate but should be monitored.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the Filter Plus plugin where possible. Limit user privileges to the minimum necessary to reduce potential exploitation impact.