CVE-2026-4123

The RW Elephant Rental Inventory plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.3.13. This is due to a missing capability check on the togglecache function which is hooked to the wpajaxtogglecache AJAX action. The function also lacks nonce...

CVE-2026-4123

The RW Elephant Rental Inventory WordPress plugin (all versions up to and including 2.3.13 ) is vulnerable to Missing Authorization in the toggle_cache() function hooked to the wp_ajax_toggle_cache AJAX action. The function lacks both a capability check and nonce verification , allowing any authe...