CVE-2026-104749

The Bit integrations plugin for WordPress (versions up to and including 2.10.6 ) is vulnerable to Unauthenticated Privilege Escalation leading to full account takeover. The root cause lies in IntegrationHandler::executeWithCapture() storing raw, attacker-controlled field values (such as user_pass...