CVE-2026-39614 WordPress JW Player for WordPress plugin <= 2.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ilGhera JW Player for WordPress jw-player-7-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JW Player for WordPress: from n/a through = 2.3.6...

WordPress JW Player for WordPress Plugin <= 2.3.3 is vulnerable to Broken Access Control

Software JW Player for WordPress Type Plugin Vulnerable versions = 2.3.3 Fixed in 2.3.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33931 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 9246d67d86c5 Credits Mika Required...