Critical WooCommerce Flaw Can Create Admin Accounts
A critical WooCommerce registration vulnerability can allow unauthenticated visitors to create accounts with Administrator privileges during checkout. CVE-2026-15369 affects vulnerable…
privilege escalation
Security Hardener Vulnerability Lets Subscribers Become Admins
A high-severity Security Hardener vulnerability can allow authenticated WordPress subscribers to bypass normal REST API permission checks and create administrator…