CVE-2026-34903Disclosure

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ocean Extra: from n/a through 2.5.3.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/ocean-extra/vulnerability/wordpress-ocean-extra-plugin-2-5-3-broken-access-control-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-04-07); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-07	2	Disclosure2
2026-04-19	1	Disclosure1

Full discourse3 posts

CVE@CVEnew173d
Disclosure
CVE-2026-34903 Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ocean Extra: fro… https://www.cve.org/CVERecord?id=CVE-2026-34903
Post summary
The post announces CVE‑2026‑34903, a missing authorization vulnerability in OceanWP Ocean Extra that permits exploitation through misconfigured access controls, but does not provide a PoC, exploit, patch, or evidence of active exploitation.
00000184
57.2K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash185d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-34903 - WordPress Ocean Extra plugin &lt;= 2.5.3 - Broken Access Control vulnerability Intel Report: https://ift.tt/AqHJioh
Post summary
An alert announces CVE-2026-34903, a broken access control flaw affecting WordPress Ocean Extra plugin versions up to 2.5.3, but provides no exploit, patch, or active exploitation evidence.
0000029
281 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds185d
Disclosure
CVE-2026-34903 Missing Authorization in OceanWP Ocean Extra Through Version 2.5.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34903
Post summary
A missing authorization vulnerability (CVE-2026-34903) affects OceanWP Ocean Extra up to version 2.5.3.
0000044
4.0K followersView on X

Explore more

Back to dashboard