CVE-2026-15312

creationtimestamp| type| source ---|---|--- 2026-08-15 04:50:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6jrai55euhdzy 2026-08-15 12:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt4nnhe7j52f...

CVE-2026-15312 Propovoice: All-in-One Client Management System <= 1.7.8 - Authenticated (ndpv_manager+) Privilege Escalation via 'role' Parameter

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the create function's REST endpoint failing to validate the user-supplied role parameter against an allowlist of permitted...

CVE-2026-15312 Propovoice: All-in-One Client Management System <= 1.7.8 - Authenticated (ndpv_manager+) Privilege Escalation via 'role' Parameter

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the create function's REST endpoint failing to validate the user-supplied role parameter against an allowlist of permitted...