{"id":"CVE-2026-84927","title":"The EmbedPress  WordPress plugin before 4.6.4 does not perform a sufficient authorization check on one of its Google Reviews REST API routes, allowing users with the Contributor role and above to modify a site-wide store, deleting entrie…","summary":"The EmbedPress  WordPress plugin before 4.6.4 does not perform a sufficient authorization check on one of its Google Reviews REST API routes, allowing users with the Contributor role and above to modify a site-wide store, deleting entrie…","severity":"low","cvss":2.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-862"],"published":"2026-09-05","updated":"2026-09-08","sourceUpdated":"2026-09-08T19:09:21.310","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-84927","references":[{"url":"https://wpscan.com/vulnerability/12984501-5d93-4941-9e12-6bb8049bd23d/","label":"contact@wpscan.com"}],"tags":["nvd"],"epss":0.00168,"epssPercentile":0.06548,"ingestedAt":"2026-09-06T06:51:17.722Z","slug":"CVE-2026-84927","body":"## Overview\n\nThe EmbedPress  WordPress plugin before 4.6.4 does not perform a sufficient authorization check on one of its Google Reviews REST API routes, allowing users with the Contributor role and above to modify a site-wide store, deleting entries an administrator configured and injecting their own, which are rendered publicly across the site.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":15,"depthScoreParts":{"impact":14.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":8296,"id":"CVE-2026-84927","ts":1788919996138,"field":"cvss","old":null,"new":"2.7"},{"seq":8295,"id":"CVE-2026-84927","ts":1788919996138,"field":"severity","old":"none","new":"low"},{"seq":8105,"id":"CVE-2026-84927","ts":1788919281856,"field":"cvss","old":"2.7","new":null},{"seq":8104,"id":"CVE-2026-84927","ts":1788919281856,"field":"severity","old":"low","new":"none"},{"seq":7914,"id":"CVE-2026-84927","ts":1788916357357,"field":"cvss","old":null,"new":"2.7"},{"seq":7913,"id":"CVE-2026-84927","ts":1788916357357,"field":"severity","old":"none","new":"low"},{"seq":7723,"id":"CVE-2026-84927","ts":1788915299019,"field":"cvss","old":"2.7","new":null},{"seq":7722,"id":"CVE-2026-84927","ts":1788915299019,"field":"severity","old":"low","new":"none"},{"seq":7532,"id":"CVE-2026-84927","ts":1788912717870,"field":"cvss","old":null,"new":"2.7"},{"seq":7531,"id":"CVE-2026-84927","ts":1788912717870,"field":"severity","old":"none","new":"low"},{"seq":7341,"id":"CVE-2026-84927","ts":1788911331919,"field":"cvss","old":"2.7","new":null},{"seq":7340,"id":"CVE-2026-84927","ts":1788911331919,"field":"severity","old":"low","new":"none"},{"seq":7145,"id":"CVE-2026-84927","ts":1788909079478,"field":"cvss","old":null,"new":"2.7"},{"seq":7144,"id":"CVE-2026-84927","ts":1788909079478,"field":"severity","old":"none","new":"low"},{"seq":6957,"id":"CVE-2026-84927","ts":1788907391973,"field":"cvss","old":"2.7","new":null},{"seq":6956,"id":"CVE-2026-84927","ts":1788907391973,"field":"severity","old":"low","new":"none"},{"seq":6759,"id":"CVE-2026-84927","ts":1788905445336,"field":"cvss","old":null,"new":"2.7"},{"seq":6758,"id":"CVE-2026-84927","ts":1788905445336,"field":"severity","old":"none","new":"low"},{"seq":6577,"id":"CVE-2026-84927","ts":1788903460196,"field":"cvss","old":"2.7","new":null},{"seq":6576,"id":"CVE-2026-84927","ts":1788903460196,"field":"severity","old":"low","new":"none"},{"seq":6363,"id":"CVE-2026-84927","ts":1788901811383,"field":"cvss","old":null,"new":"2.7"},{"seq":6362,"id":"CVE-2026-84927","ts":1788901811383,"field":"severity","old":"none","new":"low"},{"seq":6193,"id":"CVE-2026-84927","ts":1788899562560,"field":"cvss","old":"2.7","new":null},{"seq":6192,"id":"CVE-2026-84927","ts":1788899562560,"field":"severity","old":"low","new":"none"},{"seq":6061,"id":"CVE-2026-84927","ts":1788898240584,"field":"cvss","old":null,"new":"2.7"},{"seq":6060,"id":"CVE-2026-84927","ts":1788898240584,"field":"severity","old":"none","new":"low"}]}