https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T09:53:12.833854+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109927 fkie_cve-2026-109927 2026-10-25T09:53:12.851227+00:00

The HIPAA Forms WordPress plugin before 3.3.2 does not perform a capability check when handling a request that rebuilds its own custom user role, allowing a user who already holds that role to grant it administrator-level capabilities and escalate their privileges.

 https://db.gcve.eu/vuln/ghsa-fqh5-mr22-f9g4 GHSA-fqh5-mr22-f9g4 2026-10-25T09:53:12.851304+00:00

The HIPAA Forms WordPress plugin before 3.3.2 does not perform a capability check when handling a request that rebuilds its own custom user role, allowing a user who already holds that role to grant it administrator-level capabilities and escalate their privileges.