CVE-2026-7726

The CVE describes an unauthenticated vulnerability in the WordPress plugin Layouts for WPBakery

CVE-2026-7726: Missing Authorization

The Layouts for WPBakery plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on the LayoutsWPBRemote::templatesync callback registered via wpajaxnoprivhandlesync in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated...