{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "InfusedWoo Pro",
          "vendor": "Infused Addons",
          "versions": [
            {
              "lessThanOrEqual": "5.1.17",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security@wordfence.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the `ajax_iwar_preview_email()` function, which uses `is_admin()` as its only authorization check and allows low-privilege users to render email preview merge fields for an arbitrary email address. This makes it possible for authenticated attackers, with subscriber-level access and above, to generate and retrieve a valid password reset link for any WordPress user, including administrators, enabling account takeover."
    },
    {
      "lang": "es",
      "value": "El plugin InfusedWoo Pro para WordPress es vulnerable a la escalada de privilegios a trav\u00e9s de la toma de control de cuentas en todas las versiones hasta la 5.1.17, inclusive. Esto se debe a una comprobaci\u00f3n de capacidad faltante en la funci\u00f3n \u0027ajax_iwar_preview_email()\u0027, que utiliza \u0027is_admin()\u0027 como su \u00fanica comprobaci\u00f3n de autorizaci\u00f3n y permite a usuarios con bajos privilegios renderizar campos de combinaci\u00f3n de vista previa de correo electr\u00f3nico para una direcci\u00f3n de correo electr\u00f3nico arbitraria. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor y superior, generen y recuperen un enlace v\u00e1lido de restablecimiento de contrase\u00f1a para cualquier usuario de WordPress, incluidos los administradores, lo que permite la toma de control de la cuenta."
    }
  ],
  "id": "CVE-2026-19892",
  "lastModified": "2026-10-12T15:10:00.207",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "security@wordfence.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-19892",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-27T14:57:55.315941Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-25T04:18:10.770",
  "references": [
    {
      "source": "security@wordfence.com",
      "url": "https://downloads.infusedwoo.com/updater/iw5.php?changelog"
    },
    {
      "source": "security@wordfence.com",
      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/207fc33b-ccf6-4c39-976d-41e6a89ad1ec?source=cve"
    }
  ],
  "sourceIdentifier": "security@wordfence.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ],
      "source": "security@wordfence.com",
      "type": "Secondary"
    }
  ]
}