Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-57392: Tourfic Tourfic Missing Authorization

CVE-2026-57392

Summary

A security issue exists in Tourfic Tourfic, allowing unauthorized access to certain features. This affects versions up to 2.22.5, and it's essential to update to a fixed version to prevent potential security breaches. Users should check for and apply the latest updates to ensure their system is secure.

Original title

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through <= 2.22.5.

Original description

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through <= 2.22.5.

nvd CVSS3.1 6.5

Vulnerability type

CWE-862 Missing Authorization

https://patchstack.com/database/Wordpress/Plugin/tourfic/vulnerability/wordpress...

Published: 13 Jul 2026 · Updated: 20 Jul 2026 · First seen: 13 Jul 2026