CVE-2026-28190

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

CVE-2026-32471

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

CVE-2026-32471

ProLancer Element is a WordPress plugin affected by a subscriber-level SQL injection vulnerability in versions 1.4.8 and below . An authenticated subscriber (low privilege) can exploit this remotely over the network with low complexity and no user interaction. The CVSS 3.1 score is 8.5 (HIGH) , w...

EUVD-2026-64799

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

CVE-2026-32471 WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

EUVD-2026-64798

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

CVE-2026-28190

CVE-2026-28190 is a Broken Access Control vulnerability in the ProLancer Element WordPress plugin, affecting versions 1.4.8 and earlier . The flaw allows users with the Subscriber role to perform actions beyond their intended privilege level, resulting in primarily integrity impact and minor avai...