PT-2026-31158 · Unknown · Aa Web Servant 12 Step Meeting List

Published 2026-04-08 · Updated 2026-04-12 · CVE-2026-39569

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AA Web Servant 12 Step Meeting List versions through 3.19.9

Description A missing authorization flaw exists in AA Web Servant 12 Step Meeting List. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access.

Recommendations Update AA Web Servant 12 Step Meeting List to a version greater than 3.19.9.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-39569

Affected Products

Aa Web Servant 12 Step Meeting List

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-39569 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/12-step-meeting-list/vulnerability/wordpress-12-step-meeting-list-plugin-3-19-9-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2043368553144099162 · Twitter Post