WordPress Plugin Flaw Opens Door to Admin Takeover
CVE-2026-15826 in User Profile Builder exposes 40,000+ WordPress sites to admin takeover.
2 results for “admin takeover”
CVE-2026-15826 in User Profile Builder exposes 40,000+ WordPress sites to admin takeover.
A critical authorization vulnerability in SiYuan before v3.7.2 allows unauthenticated remote attackers to gain full administrative control over the workspace.