Privilege escalation.

User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase

• User Registration & Membership
• Privilege escalation

User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator

• User Registration & Membership
• Privilege escalation

Tonec Internet Download Manager Kernel Driver idmwfp.sys access control

• Tonec Internet Download Manager
• Privilege escalation
• Broken access control

Xuxueli xxl-job JobGroupController.java privileges management

• Xuxueli xxl-job
• Privilege escalation

MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation

• MemberPress Corporate Accounts
• Privilege escalation

Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation

• Add User Autocomplete
• Privilege escalation

WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

• WP Component
• Privilege escalation

Temporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege Escalation

• Temporary Login Without Password
• Privilege escalation

WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability

• Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications
• Privilege escalation

WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerability

• Gato GraphQL
• Privilege escalation

Command Injection in Puppet Enterprise

• Perforce Software Puppet Enterprise
• Command injection
• Privilege escalation

Privilege Escalation in TUBITAK BILGEM's Pardus-software

• TUBITAK BILGEM Software Technologies Research Institute Pardus-software
• Privilege escalation

Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS

• hugo
• Privilege escalation

MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator

• MultiVendorX
• Privilege escalation

Multiple vulnerabilities in IBM Aspera Enterprise Webapps

• IBM Aspera Enterprise WebApps
• Privilege escalation

IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions

• IBM Db2
• Privilege escalation

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

• IBM WebSphere Application Server
• Privilege escalation

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

• Privilege escalation
• Broken access control

>=0.10.0, <0.11.1 · fixed in 0.11.1

WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability

• SiteSkite
• Privilege escalation

OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutations

• openpanel
• Privilege escalation

capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org

• Cap-go capgo.app
• Privilege escalation

Crun: crun: rootful krun with passt executes container payload as host root

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Privilege escalation

Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id

• Registration Form for WooCommerce
• Privilege escalation

Privilege Escalation in ClearPass OnGuard Agent

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Privilege escalation

Execution with unnecessary privileges in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Privilege escalation

Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay

• grokability snipe-it
• Privilege escalation

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP).

• Everpure Portworx Operator
• Privilege escalation

Local privilege escalation vulnerability in ESET AV Remover

• ESET spol. s.r.o. ESET AV Remover (standalone)
• Privilege escalation

YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user

• YITH WooCommerce Waitlist Premium
• Privilege escalation

PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant

• User Role Editor – PublishPress Capabilities: Access Control and User Roles
• Privilege escalation

Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action

• levelfourstorefront Shopping Cart & eCommerce Store
• Privilege escalation

FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation

• fireplugins FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment
• Privilege escalation

Execution with unnecessary privileges in Google Chrome

• Google Chrome
• Privilege escalation

ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions

• ConnectWise ScreenConnect
• Privilege escalation
• Broken access control

Improper privilege management in Google Android XR

• Google Android XR
• Privilege escalation

Improper privilege management in Google Android Wear

• Google Android Wear
• Privilege escalation

seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization

• seakee CPA-Manager-Plus
• Privilege escalation
• Broken access control

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Microsoft Office SharePoint Elevation of Privilege Vulnerability

• Microsoft SharePoint Server Subscription Edition
• Privilege escalation

Microsoft Office SharePoint Information Disclosure Vulnerability

• Microsoft SharePoint Server Subscription Edition
• Privilege escalation

Microsoft SQL Server Elevation of Privilege Vulnerability

• Microsoft SQL Server 2017 (CU 31)
• Microsoft SQL Server 2017 (GDR)
• Privilege escalation

Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Path traversal
• Privilege escalation

Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount

• Red Hat build of Apache Camel - HawtIO 4
• Privilege escalation

Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer

• Algosec Horizon Security Analyzer
• Privilege escalation

TYPO3-CORE-SA-2026-023: Missing Authorization in lowlevel commands

• Privilege escalation
• Broken access control

>=14.2.0, <14.3.7 · fixed in 14.3.7

WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability

• Product Catalog Enquiry for WooCommerce by MultiVendorX
• Privilege escalation

elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges management

• elenavanengelenmaslova mocknest-serverless
• Privilege escalation

java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control

• java-json-tools json-patch
• Privilege escalation
• Broken access control

Improper privilege management in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Privilege escalation

JetBrains YouTrack: In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with…

• JetBrains YouTrack
• Privilege escalation

JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18634…

• JetBrains YouTrack
• Privilege escalation

WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter

• Very Good Plugins WP Fusion (Pro)
• Privilege escalation

Execution with unnecessary privileges in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Privilege escalation

Improper privilege management in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Privilege escalation

Privilege Escalation

• Zohocorp ManageEngine Endpoint Central
• Privilege escalation

Privilege Escalation

• Zohocorp ManageEngine Endpoint Central
• Privilege escalation

Privilege Escalation

• Zohocorp ManageEngine Endpoint Central
• Privilege escalation

Privilege Escalation

• Zohocorp ManageEngine Endpoint Central
• Privilege escalation

BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control

• BookStack
• Privilege escalation
• Broken access control