CVE-2026-111114

The Nexter Extension WordPress plugin (versions up to and including 4.7.11 ) is vulnerable to Privilege Escalation . The issue resides in the role_switcher_to_view_admin_as() function, where the /?reset-view handler fails to perform nonce or capability checks when the supplied username matches th...