CVE-2026-85659 - PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter
CVE ID :CVE-2026-85659 Published : Oct. 16, 2026, 6:17 a.m. | 1 hour, 16 minutes ago Description :The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the...