CVE-2026-1074 | WP App Bar Plugin up to 1.5 on WordPress Setting App_Bar_Settings app-bar-features authorization

A vulnerability labeled as critical has been found in WP App Bar Plugin up to 1.5 on WordPress. Affected by this issue is the function App_Bar_Settings of the component Setting Handler. The manipulation of the argument app-bar-features results in missing authorization.

This vulnerability was named CVE-2026-1074. The attack may be performed from remote. There is no available exploit.