CVE-2026-114740: WPVR 8.5.55 to before 9.1.3

Affected technology

WPVR · 8.5.55 to before 9.1.3
Vendor not specified by the source

Description’s affected range: before 9.1.3 does not correctly check user capabilities when creating a tour through its setup wizard

Component: Not specified by the source

The source does not specify what an attacker can achieve.

Published 25-Oct-2026 10:32 UTC

GitHub Advisory Database · Source record · observed 2026-10-25 10:32:14.832500+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-25 10:32:11.866563+00:00 UTC