VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-269Vulnerability type

WordPress Privilege Escalation vulnerabilities (page 15)

Bugs that let a low-privileged or anonymous user become an administrator, usually through registration or profile updates.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Privilege Escalation vulnerabilities (page 15)
SeverityVulnerabilityCVEInstallsPublished
Medium5.4Unauthenticated Stored Cross-Site Scripting via Comment Content via Bundled Simple HTML DOM Noise Restoration
Smart Cookie Kit≤2.3.2No patch available
CVE-2026-119178—
High8.1Unauthenticated Arbitrary File Upload via 'modelApi' Parameter
Live2DWebCanvas≤2.2.1No patch available
CVE-2026-92895—
High7.6Authenticated (Subscriber+) Privilege Escalation to 'check-token' AJAX Action
Pubjet | پاب‌جت≤5.4.8No patch available
CVE-2026-103479—
Critical9.8Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter
BuddyForms≤2.10.5Update to 2.10.6
CVE-2026-107622—
Medium6.4Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'track' Post Meta 'label' Field
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos≤5.0.0Update to 5.1.0
CVE-2026-116545—
Medium5.4Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion
BuddyForms≤2.10.5Update to 2.10.6
CVE-2026-107658—
High8.8Authenticated (Subscriber+) Privilege Escalation via Account Change-Password Form
Advanced Members for ACF≤1.3.0Update to 1.3.1
CVE-2026-116624—
Medium4.9Authenticated (Subscriber+) Stored Cross-Site Scripting via 'option_page' Parameter via 'all' Hook
AAA Autoload Optimizer≤1.7.0Update to 1.7.1
CVE-2026-119211—
Medium5.4Authenticated (Subscriber+) Arbitrary Shortcode Execution via Author Biographical Info
AMP for WP – Accelerated Mobile Pages≤1.1.18Update to 1.1.19
CVE-2026-103908—
Medium4.9Authenticated (Administrator+) SQL Injection via 'params[searchKey]' Parameter
YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports≤2.7.8Update to 2.7.9
CVE-2026-109977—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' User Meta
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory≤2.10.2Update to 2.10.3
CVE-2026-120550—
Medium5.3Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' Parameter
Redirection for Contact Form 7≤3.2.14Update to 3.2.15
CVE-2026-120659—
High7.2Unauthenticated Stored Cross-Site Scripting via 'vars' Parameter
MDTF – Meta Data and Taxonomies Filter≤1.4.1Update to 1.4.2
CVE-2026-110776—
Medium6.5Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'id' Parameter
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce≤4.1.29Update to 4.1.30
CVE-2026-109994—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Block Attribute
Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارسی دیت≤6.4Update to 6.5
CVE-2026-97642—
Medium4.3Missing Authorization to Authenticated (Subscriber+) Unauthorized Video Importation via vodimportvideo AJAX Action
VOD Infomaniak≤1.5.15Update to 1.5.16
CVE-2026-115831—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'badge' Shortcode Attribute
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP≤1.2.80Update to 1.2.81
CVE-2026-120671—
Medium6.5Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler on Tour/Hotel Edit Screen
Travelly – Tour & Travel Booking Manager for WooCommerce≤2.3.11Update to 2.3.12
CVE-2026-121794—
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via Post Slug
Permalink Manager Lite≤2.6.1Update to 2.6.2
CVE-2026-122222—
High7.2Unauthenticated Stored Cross-Site Scripting via Tree Chart Widget Settings
Graphina – Charts and Graphs For Elementor≤3.1.13Update to 3.1.14
CVE-2026-110291—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute
Posts Table with Search & Sort≤1.4.14Update to 1.4.15
CVE-2026-118189—
Medium4.3Missing Authorization
Directorist: AI-Powered Business Directory, Listings & Classified Ads≤8.10Update to 8.11
CVE-2026-118529—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Secure Custom Fields≤6.9.7Update to 6.9.8
CVE-2026-97195—
Medium5.3Unauthenticated Information Exposure
Content Egg – Affiliate Product Importer & Price Comparison≤12.0.0No patch available
CVE-2026-119751—
Medium5.3Missing Authorization
Pie Register – User Registration, Profiles & Content Restriction≤3.8.4.15Update to 3.8.4.16
CVE-2026-96961—
Medium4.3Authenticated (Contributor+) Information Exposure
Secure Custom Fields≤6.9.7Update to 6.9.8
CVE-2026-97194—
Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
Secure Custom Fields≤6.9.7Update to 6.9.8
CVE-2026-97193—
Medium4.3Missing Authorization
Secure Custom Fields≤6.9.7Update to 6.9.8
CVE-2026-97192—
Medium4.3Missing Authorization
Pie Register – User Registration, Profiles & Content Restriction≤3.8.4.15Update to 3.8.4.16
CVE-2026-96963—
High7.2Authenticated (Shop Manager+) PHP Code Injection via eval() via 'feedConfigCustom2' Parameter
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels≤8.0.26Update to 8.0.27
CVE-2026-87964—

Search VulnCrest Radar

Jump to

Are you sure?