Description An improper access check allows unauthorized access to com_config webservice endpoints. Remediation References CVE-2026-35223 Related Vulnerabilities WordPress Plugin Carousel slideshow Arbitrary File Upload (3.11) Moodle CVE-2024-34002 Vulnerability (CVE-2024-34002) XWiki Incorrect Authorization Vulnerability (CVE-2023-46244) WordPress Plugin ProPlayer 'pp_playlist_id' Parameter SQL Injection (4.7.7) PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6291) Severity Critical Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CVE-2026-35223