https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T09:05:41.768572+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-103694 CVE-2026-103694 — Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin 2026-10-16T09:05:41.771633+00:00

Affected: Unknown Mobile builder

The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.