CVE-2026-7106 - Highland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation
CVE ID :CVE-2026-7106 Published : April 27, 2026, 3:16 a.m. | 44 minutes ago Description :The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0. This is due to insufficient authorization checks in the hscrm_sa
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] Sri Lanka probes cyber heist of $2.5m debt payment meant for Australia
- [CYBER] Suspicious Microsoft Store App Vibing.exe Allegedly Harvests Screens and Audio
- [CYBER] GHSA-RPM5-65CW-6HJ4: GHSA-RPM5-65CW-6HJ4: Command Injection via Git Options Bypass in GitPython
- [CYBER] Raspberry Pico: USB Hacking Device Programming
- [CYBER] Attackers Chain CODESYS Vulnerabilities to Backdoor Applications
- [CYBER] El GRU ruso secuestra routers TP-Link domésticos en una operación global: NSA y 16 países urgen reiniciar el tuyo