CVE-2026-115257

The WP Roster WordPress plugin, versions prior to 2.36 , is vulnerable to an unauthenticated data modification flaw. The root cause is the lack of capability or nonce checks when writing stored roster data. This allows an unauthenticated attacker to overwrite, wipe, or restore the content of any ...