Privilege escalation.

WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability

• appsbd Vitepos
• Privilege escalation

WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability

• Estatik
• Privilege escalation

WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability

• Javier Carazo Import and export users and customers
• Privilege escalation

WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption

• User Frontend
• Privilege escalation

An information disclosure vulnerability in ZTE U30 Air product

• ZTE U30 Air
• Privilege escalation

gedelumbung HospitalManagement Configuration sistem.php simpan improper authorization

• gedelumbung HospitalManagement
• Privilege escalation
• Broken access control

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON

• Hewlett Packard Enterprise (HPE) Instant ON
• Privilege escalation

Authentication Bypass in the Captive Portal of HPE Networking Instant On

• Hewlett Packard Enterprise (HPE) Instant ON
• Privilege escalation

Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

• Privilege escalation
• CWE-693

<41.10.6 || >=42.0.0-alpha.1, <42.9.2 || >=43.0.0-alpha.1, <43.4.1 || >=44.0.0-alpha.1, <44.0.0-beta.5 · fixed in 41.10.6, 42.9.2, 43.4.1, 44.0.0-beta.5

Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

• Privilege escalation
• CWE-1188

<41.10.6 || >=42.0.0-alpha.1, <42.9.2 || >=43.0.0-alpha.1, <43.4.1 || >=44.0.0-alpha.1, <44.0.0-beta.5 · fixed in 41.10.6, 42.9.2, 43.4.1, 44.0.0-beta.5

Improper privilege management in Eclipse Foundation Eclipse ThreadX

• Eclipse Foundation Eclipse ThreadX
• Privilege escalation
• Memory corruption

Privilege escalation in the Places component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Address Bar component

• Mozilla Thunderbird
• Mozilla Firefox
• Privilege escalation

Privilege escalation in the DOM: Service Workers component

• Mozilla Thunderbird
• Mozilla Firefox
• Privilege escalation

Privilege escalation in the DLL Services component

• Mozilla Thunderbird
• Mozilla Firefox
• Privilege escalation

realjerrytang tacomall api-admin Backend ApiMaApplication.java OrgStaffServiceImpl.add improper authorization

• realjerrytang tacomall
• Privilege escalation
• Broken access control

FastAdmin Database Management database.php unnecessary privileges

• FastAdmin
• Privilege escalation

RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management

• raspap-webgui
• Privilege escalation

Eleveo Call Recording Software Query Builder searchAction.do access control

• Eleveo Call Recording Software
• Privilege escalation
• Broken access control

Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters

• SUSE Rancher
• Privilege escalation

Fleet applies namespace labels and annotations without the bundle's service account privileges

• SUSE Rancher
• Privilege escalation

Thinkware U3000 TCP Service wpa_supplicant.conf get_file access control

• Thinkware U3000
• Privilege escalation
• Broken access control

Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

• Thinkware U3000
• Privilege escalation
• Broken access control

Authenticated File Write to RCE via keepalived in DDI Central

• Zohocorp DDI Central
• Privilege escalation
• Unrestricted file upload

Krayin laravel-crm acl.php access control

• Krayin laravel-crm
• Privilege escalation
• Broken access control

Nezha Dashboard before 2.3.5 Task Type Validation Bypass

• nezha
• Privilege escalation

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings

• WPeMatico RSS Feed Fetcher
• Privilege escalation

Groups <= 4.6.0 - Authenticated (Subscriber+) Privilege Escalation via 'groups_join' Shortcode

• itthinx Groups – Memberships and Access Control
• Privilege escalation

Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps

• budibase server
• Privilege escalation

Capgo CLI through 7.98.2 Excessive Permissions via Overpermissioned Play Console Service Account

• Cap-go @capgo/cli
• Privilege escalation

Capgo OTA Manifest Poisoning via app_versions.manifest Bypass

• Cap-go capgo.app
• Privilege escalation

Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

• Cap-go capgo.app
• Privilege escalation

Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-list

• Cap-go capgo.app
• Privilege escalation

OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind

• OpenClaw
• Privilege escalation

OpenClaw before 2026.7.1 Authorization Bypass via chat.send

• OpenClaw
• Privilege escalation

GLPI: Unauthorized Debug Mode Activation via Profile Update (Privilege Escalation)

• glpi
• Privilege escalation

krayin laravel-crm User Management UserController.php privileges management

• krayin laravel-crm
• Privilege escalation

Zammad: Incorrect Authorization and Improper Privilege Management

• zammad
• Privilege escalation
• Broken access control

Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

• Google gVisor
• Privilege escalation
• Information disclosure

Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field

• knitpay Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more
• Privilege escalation

Optima Express IDX <= 8.7.5 - Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment

• ihomefinder Optima Express IDX
• Privilege escalation

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

• 101gen Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code
• Privilege escalation

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privilege…

• Privilege escalation

YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization

• YunaiV ruoyi-vue-pro
• zhijiantianya ruoyi-vue-pro
• Privilege escalation
• Broken access control

Docmost: Privilege Escalation - ADMIN Can Invite Users as OWNER

• docmost
• Privilege escalation

authentik: Privilege Escalation to Superuser via Group Hierarchy

• authentik
• Privilege escalation
• Broken access control

TaleLin lin-cms-spring-boot book Endpoint BookController.java searchBook improper authorization

• TaleLin lin-cms-spring-boot
• Privilege escalation
• Broken access control

TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization

• TaleLin lin-cms-spring-boot
• Privilege escalation
• Broken access control

TaleLin lin-cms-spring-boot book Endpoint BookController.java getBook improper authorization

• TaleLin lin-cms-spring-boot
• Privilege escalation
• Broken access control

Paytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter

• paytiumsupport Paytium: Mollie payment forms & donations
• Privilege escalation

kvcache-ai mooncake MountSegment Request Processing segment.cpp access control

• kvcache-ai mooncake
• Privilege escalation
• Broken access control

Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile…

• carazo Import and export users and customers
• Privilege escalation

Neethuharii CafeManagement AddCashierCode.php addcashier improper authorization

• Neethuharii CafeManagement
• Privilege escalation
• Broken access control

Execution with unnecessary privileges in WebPros cPanel

• WebPros cPanel
• Privilege escalation

Automation-controller: automation-controller: instance install_bundle issues 10-year, non-revocable receptor mesh-ca certificates for caller-chosen (and case-variant impersonating) hostnames

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Privilege escalation

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Privilege escalation

Improper privilege management in Dell Secure Connect Gateway (SCG) Policy Manager

• Dell Secure Connect Gateway (SCG) Policy Manager
• Privilege escalation

Privilege Escalation vulnerability

• Zohocorp ManageEngine OpManager
• Zohocorp ManageEngine Firewall Analyzer
• Privilege escalation

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Privilege escalation