low3.7
CVE-2026-11882
The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowi…
Impact
The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthenticated attackers to complete the connection flow and overwrite the stored third-party integration access token. A durable overwrite requires the site to already be connected to a paid account.
Affected products
| Product | Affected versions |
|---|---|
| Builderall For WordPress Plugin | before 3.0.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.