2 matches found
CVE-2026-14805
The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16. This is due to a combination of two flaws: 1 the masterstudymsstmsetdiscardtransient AJAX endpoint in admin/admin-notices/classes/STMHandler.php accepts an arbitrary transient key...
8.8CVSS0.00309EPSS
SaveExploits0References2
EUVD-2026-78466
The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16. This is due to a combination of two flaws: 1 the masterstudymsstmsetdiscardtransient AJAX endpoint in admin/admin-notices/classes/STMHandler.php accepts an arbitrary transient key...
8.8CVSS5.8AI score0.00309EPSS
SaveExploits0References2
20