CVE-2026-45216

HighCVSS 8.8

Published: 25/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

The Smart Manager plugin for WordPress contains an incorrect privilege assignment vulnerability that allows privilege escalation. This issue affects versions up to and including 8.85.0.

Risk Assessment

An attacker can gain unauthorized access to administrative functions, leading to full compromise of the WordPress site.

Recommendation

Update the Smart Manager plugin to the latest available version that fixes this vulnerability.

Other vulnerabilities in Smart Manager

CVE-2026-57704High
The Smart Manager plugin version 8.90.0 and earlier contains an unauthenticated Cross-Site Scripting (XSS) vulnerability. An attacker can inject a malicious script that executes in the victim's browser.

Original NVD description (English source)

Incorrect Privilege Assignment vulnerability in StoreApps Smart Manager allows Privilege Escalation. This issue affects Smart Manager: from n/a through 8.85.0.