SimpleForm Vulnerability: Critical WordPress Admin Risk
A critical SimpleForm vulnerability can let unauthenticated visitors create WordPress Administrator accounts through unsafe registration metadata handling. Learn how CVE-2026-104748…
privilege escalation
Critical Paytium Vulnerability Enables Admin Creation
A critical Paytium vulnerability tracked as CVE-2026-18467 can allow unauthenticated attackers to create WordPress administrator accounts under specific payment-form conditions….
Critical JetFormBuilder Vulnerability Is Under Active Attack
A critical JetFormBuilder vulnerability can allow unauthenticated attackers to create WordPress administrator accounts through unsafe form validation. Site owners running…
Eventin Vulnerability Restores Admin Power to User ID 1
A high-severity Eventin vulnerability can give administrator-equivalent capabilities back to WordPress user ID 1 after the account has been demoted….
ACPT Vulnerability Allows Administrator Takeover
A critical ACPT vulnerability can allow unauthenticated attackers to modify existing WordPress user accounts through exposed public forms. Learn which…
Critical WooCommerce Flaw Can Create Admin Accounts
A critical WooCommerce registration vulnerability can allow unauthenticated visitors to create accounts with Administrator privileges during checkout. CVE-2026-15369 affects vulnerable…
Security Hardener Lets Subs Become Admins
A high-severity Security Hardener vulnerability can allow authenticated WordPress subscribers to bypass normal REST API permission checks and create administrator…