CVE Catalog
CVE-2026-96815
HighCVSS 7.2Summary
Vulnerability in Vitepos plugin up to version 3.5.0 allows privilege escalation through a custom user role.
Risk Assessment
An attacker with a custom role could gain higher privileges, potentially leading to unauthorized system changes.
Recommendation
Immediately update the Vitepos plugin to the latest version that fixes this vulnerability.
Other vulnerabilities in Vitepos
See all- CVE-2026-54841High
Versions of Vitepos up to 3.4.2 have a vulnerability that allows unauthorized access to sensitive data.
- CVE-2026-57385High
The Vitepos WordPress plugin contains a blind SQL injection vulnerability due to improper neutralization of special elements in SQL commands. This affects versions up to and including 3.4.2.
Original NVD description (English source)
Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS