Pubjet (<= 5.4.8) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/pubjet--5.4.8/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 15:19:42 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPubjet WordPress Plugin: Privilege Escalation (CVE-2026-103479)https://feed.craftedsignal.io/briefs/2026-11-pubjet-privesc/Fri, 06 Nov 2026 15:19:42 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-pubjet-privesc/The Pubjet WordPress plugin contains a vulnerability in the `checkToken()` AJAX handler that allows authenticated users with Subscriber-level access or higher to escalate privileges by overwriting stored REST API credentials.The Pubjet WordPress plugin (versions 5.4.8 and earlier) is vulnerable to privilege escalation. The checkToken() AJAX handler, registered as wp_ajax_pubjet-check-token, lacks capability checks and nonce verification. This allows authenticated attackers with Subscriber-level access to overwrite the plugin's stored REST API credential. By planting an attacker-chosen token, the attacker can authenticate as an authorized Pubjet API client to access restricted endpoints, including createReportage, updateReportage, deleteReportage, toggleCopyright, and createBacklink.

]]>highadvisory