Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Wp Roster Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-115257 1 Wordpress-extensions 1 Wp Roster 2026-11-12 5.3 Medium
The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored roster data, allowing unauthenticated attackers to overwrite, wipe or restore the content of any roster.