CVE-2026-14356

The FleekDash V2 WordPress plugin (up to version 2.6.2.2) is vulnerable to authorization bypass due to improper verification of user rights. authenticated users with subscriber-level access or higher can overwrite the email and password of any WordPress user, including administrators, enabling fu...