CVE-2026-104678 | CP Media Player Plugin up to 1.3.3 on WordPress Settings Page access control

October 7, 2026 Yanac

A vulnerability marked as critical has been reported in CP Media Player Plugin up to 1.3.3 on WordPress. The affected element is an unknown function of the component Settings Page Handler. Performing a manipulation results in improper access controls.

This vulnerability is known as CVE-2026-104678. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More