CVE-2026-104799 - Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters
CVE ID :CVE-2026-104799 Published : Nov. 4, 2026, 12:17 p.m. | 47 minutes ago Description :The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2 via the `wcfmmp_profile_settings()` REST handler exposed at `POST...