CVE-2026-96815
HighCVSS 7.2Summary
Vulnerability in Vitepos plugin up to version 3.5.0 allows privilege escalation through a custom user role.
Risk Assessment
An attacker with a custom role could gain higher privileges, potentially leading to unauthorized system changes.
Recommendation
Immediately update the Vitepos plugin to the latest version that fixes this vulnerability.
Other vulnerabilities in Vitepos
See all- CVE-2026-105076High
The Vitepos plugin (by Appsbd) up to version 3.6.1 contains a Blind SQL Injection vulnerability that allows an attacker to manipulate database queries.
- CVE-2026-57385High
The Vitepos WordPress plugin contains a blind SQL injection vulnerability due to improper neutralization of special elements in SQL commands. This affects versions up to and including 3.4.2.
- CVE-2026-54841High
Versions of Vitepos up to 3.4.2 have a vulnerability that allows unauthorized access to sensitive data.
Original NVD description (English source)
Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS