---
id: CVE-2026-65529
title: WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability
summary: >-
  Missing Authorization vulnerability in Iqonic Designs Graphina – Charts and
  Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting
  Incorrectly Configured Access Control Security Levels.This issue affects
  Graphina – C…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-862
vendor: Iqonic Designs
product: graphina-elementor-charts-and-graphs
affected:
  - graphina-elementor-charts-and-graphs <= 3.1.12
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-07-23T13:39:47.059155Z'
published: '2026-07-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T08:42:28.015Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-65529'
references:
  - url: >-
      https://patchstack.com/database/wordpress/plugin/graphina-elementor-charts-and-graphs/vulnerability/wordpress-graphina-plugin-3-1-12-broken-access-control-vulnerability?_s_id=cve
tags:
  - cve.org
epss: 0.00313
epssPercentile: 0.22933
ingestedAt: '2026-10-23T09:20:44.061Z'
---

## Overview

Missing Authorization vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Graphina – Charts and Graphs For Elementor: from n/a through 3.1.12.

## Affected

- `graphina-elementor-charts-and-graphs <= 3.1.12`

## Remediation

Update the WordPress Graphina – Charts and Graphs For Elementor plugin to the latest available version (at least 3.1.13).