CVE-2026-8682 | hasanazizul 3D Viewer Plugin up to 2.0.1 on WordPress REST Endpoint ar_try_on_settings authorization

A vulnerability was found in hasanazizul 3D Viewer Plugin up to 2.0.1 on WordPress. It has been classified as critical. This impacts the function ar_try_on_settings of the component REST Endpoint. This manipulation causes missing authorization.

This vulnerability is registered as CVE-2026-8682. Remote exploitation of the attack is possible. No exploit is available.