Description An improper access check allows privileged users to overwrite media files without editing permissions. Remediation References CVE-2026-48947 Related Vulnerabilities WordPress Plugin Select All Categories and Taxonomies, Change Checkbox to Radio Buttons Cross-Site Scripting (1.3.1) WordPress Plugin The Post Grid-Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery (5.0.4) jPlayer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2022) SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0260) WordPress Plugin WatuPRO SQL Injection (5.5.3.6) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities CWE-284 CVE-2026-48947