CVE ID :CVE-2026-11794 Published : July 1, 2026, 6 a.m. | 9 hours, 12 minutes ago Description :The Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin before 2.1.1 does not restrict the WordPress role assigned when it creates a user from a public form submission, allowing...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-11794 - Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping

VERWANDTEARTIKEL

CitrixBleed Vulnerability Exploited by Hackers Within 24 Hours of Public Disclosure

USN-8501-1: Linux kernel vulnerabilities

CVE-2026-55950 - DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

CVE-2026-55952 - TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

CVE-2026-44935 - Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog