Description An improper access check allowed low privileged users to edit the task types of existing scheduler tasks. Remediation References CVE-2026-48900 Related Vulnerabilities WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.6) PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-10208) PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3478) WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.1) Joomla Improper Access Control Vulnerability (CVE-2026-23899) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Tags Missing Update Known Vulnerabilities CVE-2026-48900