https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 06:24:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-288684 EUVD-2026-288684 https://cve.radiocsirt.org/vuln/euvd-2026-288684 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4261 <p>The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2. This is due to the plugin allowing a user to update the &#39;on_expire_default_to_role&#39; meta through the &#39;save_extra_user_profile_fields&#39; function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.</p> <p>The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2. This is due to the plugin allowing a user to update the &#39;on_expire_default_to_role&#39; meta through the &#39;save_extra_user_profile_fields&#39; function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4261 https://cve.radiocsirt.org/vuln/ghsa-w7pq-j4cx-8r97 <p>The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2. This is due to the plugin allowing a user to update the &#39;on_expire_default_to_role&#39; meta through the &#39;save_extra_user_profile_fields&#39; function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.</p> <p>The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2. This is due to the plugin allowing a user to update the &#39;on_expire_default_to_role&#39; meta through the &#39;save_extra_user_profile_fields&#39; function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.</p> https://cve.radiocsirt.org/vuln/ghsa-w7pq-j4cx-8r97