CVE-2026-16135

The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the setemailnotificationsettings function. This makes it possible for authenticated attackers, with...

CVE-2026-16135

The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.9.9.8.1 . The root cause is that the set_email_notification_settings() function allows arbitrary user meta updates . An authenticated attacker with Subscriber-level access or higher can exploit...

CVE-2026-16135 VibeBP <= 1.9.9.8.1 - Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings()

The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the setemailnotificationsettings function. This makes it possible for authenticated attackers, with...

EUVD-2026-124349

The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the setemailnotificationsettings function. This makes it possible for authenticated attackers, with...

WordPress VibeBP plugin <= 1.9.9.8.1 - Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings() vulnerability

Authenticated Subscriber+ Privilege Escalation in setemailnotificationsettings vulnerability discovered by d.v4ns3c in WordPress Plugin VibeBP versions = 1.9.9.8.1...