Product
The bLoyal: Loyalty & Promotions plugin for WordPress contains an unauthenticated configuration modification and privilege escalation vulnerability, CVE-2026-15001, allowing low-privileged users to assume administrator accounts.