WordPress AutoNetTV Relay plugin < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cron vulnerability

Unauthenticated Privilege Escalation via Scheduled Sync Cron vulnerability discovered by moonge in WordPress Plugin AutoNetTV Relay versions 3.0.14...

CVE-2026-13600 AutoNetTV Relay < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cron

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its scheduled content-synchronization task. On server configurations where the scheduled task executes before the HTTP...

CVE-2026-13600

The AutoNetTV Relay WordPress plugin (versions before 3.0.14 ) is vulnerable to unauthenticated privilege escalation due to a lack of capability or authentication checks during its scheduled content-synchronization task. On specific server configurations where the task executes before the HTTP re...