CVE-2026-112242 WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile Builder: from n/a through 4.0.4...

CVE-2026-112242

The Cozmoslabs Profile Builder WordPress plugin (versions

CVE-2024-54363-Exploit

CVE-2024-54363-Exploit Incorrect Privilege Assignment vulnerability in nssTheme Wp NssUser Register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through 1.0.0. Description The nssTheme Wp NssUser Register plugin for WordPress is vulnerable to an Incorrect Privilege...

EUVD-2026-104135

Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5...

CVE-2026-110373 WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...

CVE-2026-110373

The Hamid Alinia Login with phone number WordPress plugin is vulnerable to Privilege Escalation due to an Incorrect Privilege Assignment (CWE-266) vulnerability. This issue affects versions up to and including 1.8.77 . An attacker could potentially gain elevated privileges within the application....

CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...

CVE-2026-110372

The WordPress OttoKit plugin (versions

CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...

CVE-2026-109693

The Fluent CRM WordPress plugin, developed by WP ManageNinja LLC, is vulnerable to Privilege Escalation due to an Incorrect Privilege Assignment (CWE-266). This issue affects versions from n/a through 3.2.5 . An attacker with low-level privileges could potentially escalate their permissions withi...

CVE-2026-107424

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

EUVD-2026-101013

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

CVE-2026-105445

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

CVE-2026-105445

An Incorrect Privilege Assignment vulnerability in Docker Hub 's account-to-organization conversion feature allows an authenticated attacker to reassign a personal access token (PAT) they control to another user. Because the token secret remains unchanged during this reassignment, the attacker ca...

CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

CVE-2026-105445: Incorrect Privilege Assignment

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

CVE-2026-96341

The WPMU DEV Forminator WordPress plugin (versions up to and including 1.57.3 ) is vulnerable to an Incorrect Privilege Assignment flaw (CWE-266). This vulnerability allows for Privilege Escalation , potentially enabling an attacker to gain unauthorized elevated permissions within the application...

CVE-2026-106610

The miniOrange OTP Verification WordPress plugin (versions

CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...

CVE-2026-106608 WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2...