CVE-2026-108313

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server . The vulnerability is associated with CWE-178 (Improper Handling of Case Sensitivity). The CVSS 3.1 score is 6.6 (Medium) , reflecting high impact on confidentiality, integrity, and availability, though it requires...

CVE-2026-108313 Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server...

EUVD-2026-111254

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server...

CVE-2024-54363-Exploit

CVE-2024-54363-Exploit Incorrect Privilege Assignment vulnerability in nssTheme Wp NssUser Register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through 1.0.0. Description The nssTheme Wp NssUser Register plugin for WordPress is vulnerable to an Incorrect Privilege...

CVE-2026-112242 WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile Builder: from n/a through 4.0.4...

CVE-2026-112242 WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile Builder: from n/a through 4.0.4...

CVE-2026-112242

The Cozmoslabs Profile Builder WordPress plugin (versions

EUVD-2026-104135

Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5...

CVE-2026-110373 WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...

CVE-2026-110373

The Hamid Alinia Login with phone number WordPress plugin is vulnerable to Privilege Escalation due to an Incorrect Privilege Assignment (CWE-266) vulnerability. This issue affects versions up to and including 1.8.77 . An attacker could potentially gain elevated privileges within the application....

CVE-2026-110372

The WordPress OttoKit plugin (versions

CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...

CVE-2026-110372 WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40...

CVE-2026-109693

The Fluent CRM WordPress plugin, developed by WP ManageNinja LLC, is vulnerable to Privilege Escalation due to an Incorrect Privilege Assignment (CWE-266). This issue affects versions from n/a through 3.2.5 . An attacker with low-level privileges could potentially escalate their permissions withi...

CVE-2026-107424

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

EUVD-2026-101013

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7...

CVE-2026-105445

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

CVE-2026-105445

An Incorrect Privilege Assignment vulnerability in Docker Hub 's account-to-organization conversion feature allows an authenticated attacker to reassign a personal access token (PAT) they control to another user. Because the token secret remains unchanged during this reassignment, the attacker ca...

VulnCheck KEV: CVE-2025-49924

Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through = 2.2.4.2...