CVE-2026-13468— themeisle Visualizer 授权问题漏洞

Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint

The Visualizer – Tables & Charts Manager with Built-in AI Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to access and export the contents of any visualizer chart on the site — including charts in draft, private, pending, future, or trash status — as CSV, Excel, or HTML via the /wp-json/visualizer/v1/action/{chart}/{type}/ REST endpoint. This bypass is particularly impactful because the standard WordPress REST endpoint for the non-public 'visualizer' custom post type correctly enforces capability checks and returns HTTP 401 to unauthenticated callers, whereas this plugin-registered route circumvents that protection entirely.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

授权机制缺失

themeisle Visualizer 授权问题漏洞

themeisle visualizer是themeisle公司开源的一个数据可视化图表插件。 themeisle Visualizer 4.0.3及之前版本存在授权问题漏洞，该漏洞源于未正确验证用户权限，可能导致未经身份验证的攻击者通过/wp-json/visualizer/v1/action/{chart}/{type}/ REST端点访问并导出站点上任意图表内容。

N/A

N/A