Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 14:25:32 +0000 CVE-2026-123092 — WP Remote Users Sync < 2.3.0 - Privilege Escalation to Administrator via 'meta' Sync Action https://db.gcve.eu/vuln/cve-2026-123092 <p><strong>Affected:</strong> Unknown WP Remote Users Sync</p> <p>The WP Remote Users Sync WordPress plugin before 2.3.0 does not restrict which user metadata keys may be written through its incoming user synchronisation requests, allowing a site that holds the shared synchronisation keys to set the capabilities of any existing account and escalate it to administrator.</p> <p><strong>Affected:</strong> Unknown WP Remote Users Sync</p> <p>The WP Remote Users Sync WordPress plugin before 2.3.0 does not restrict which user metadata keys may be written through its incoming user synchronisation requests, allowing a site that holds the shared synchronisation keys to set the capabilities of any existing account and escalate it to administrator.</p> https://db.gcve.eu/vuln/cve-2026-123092