4145 matches found
PT-2026-121764
The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administrator may manage the specific user accounts targeted by its login-approval feature, checking only a site-level capability, which on WordPress Multisite could allow a subsite administrator to change th...
PT-2026-121766
The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site administrator who is not a Super Admin to create or overwrite network-wide options...
By-Poloss..-..CVE-2026-15038-POC
šØ CVE-2026-15038 ā InfiniteWP Client Admin Takeover Unauthenticated Admin Account Takeover in WordPress Multisite š Overview InfiniteWP Client plugin for WordPress getoption'iwpclientactionmessageid' && !$iwpmmbcore-getoption'iwpclientpublickey' Reader : Uses getsiteoption ā reads from...
EUVD-2026-107059
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own sit...
CVE-2026-107128 Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own sit...
CVE-2026-107128
The Uncanny Toolkit for LearnDash WordPress plugin (versions before 3.8.2 ) is vulnerable to an Admin+ Cross-Site Account Lockout due to a missing authorization check. Specifically, the plugin fails to verify if an acting user has permission to manage targeted accounts when changing their verific...
CVE-2026-107128 Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own sit...
PT-2026-120454
The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification state, allowing a subsite administrator on a multisite network to mark arbitrary network users outside their own sit...
CVE-2026-111625
10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajaxpush that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on site...
CVE-2026-111625
The 10up Distributor software (versions before 2.3.2 ) contains a missing authorization vulnerability within the ajax_push() function. This flaw allows Contributor-level multisite users to publish posts on other network sites to which they do not have access. By utilizing a dt-push nonce combined...
EUVD-2026-103047
10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajaxpush that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on site...
CVE-2026-111625 10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action
10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajaxpush that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on site...
CVE-2026-111625 10up Distributor before 2.3.2 Missing Authorization via dt_push AJAX Action
10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajaxpush that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on site...
CVE-2026-110039 Smush < 4.3.4 - Admin+ Network-Wide Plugin Settings Update on Multisite
The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network...
CVE-2026-110039
The Smush WordPress plugin (versions before 4.3.4 ) contains an incorrect authorization vulnerability (CWE-863). The plugin fails to restrict changes to network-wide access settings to only network administrators. Consequently, an administrator of a single site within a WordPress Multisite networ...
WordPress Smush plugin < 4.3.4 - Admin+ Network-Wide Plugin Settings Update on Multisite vulnerability
Admin+ Network-Wide Plugin Settings Update on Multisite vulnerability discovered by Erwan LR WPScan in WordPress Plugin Smush Image Compression and Optimization versions 4.3.4...
PT-2026-115475
Name of the Vulnerable Software and Affected Versions Smush WordPress plugin versions prior to 4.3.4 Description An issue exists where changes to a network-wide access setting are not restricted to network administrators. This allows an administrator of a single site within a multisite network to...
PT-2026-115477
Name of the Vulnerable Software and Affected Versions affiliate-toolkit WordPress plugin versions prior to 3.8.9 Description The plugin fails to validate a user-supplied sort value against an allowlist before incorporating it into a database query. Because the affected administrative list screen...
PT-2026-116024
Name of the Vulnerable Software and Affected Versions 10up Distributor versions prior to 2.3.2 Description A missing authorization issue exists in the ajax push function. This allows users with Contributor-level permissions in a multisite environment to publish posts on other sites within the...
WordPress Ultimate Multisite plugin < 2.17.2 - Unauthenticated LFI vulnerability
Unauthenticated LFI vulnerability discovered by hanzzly Farhan Auliya Abrar in WordPress Plugin Ultimate Multisite ā WordPress Multisite SaaS & WaaS Platform versions 2.17.2...