Veille CVE
Recherche « Unknown Add User Autocomplete »
1 CVE
Critique 0
Élevée 1
Moyenne 0
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Unknown Add User Autocomplete » ✕
-
CVE-2026-87759 8.8 Élevée
Unknown Add User Autocomplete
The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselves the administrator role on a multisite installation.