Skip to content
Threat Feed
Subscribe

Product

Userplace (<= 1.2.0)

1 brief RSS
critical advisory

Userplace WordPress plugin: Unauthenticated administrative account creation (CVE-2026-110963)

The Userplace WordPress plugin through 1.2.0 fails to perform authorization checks on an exposed AJAX action, allowing unauthenticated attackers to create administrator accounts and modify site settings for full site takeover.

Userplace web-vulnerability wordpress cve-2026-110963 authorization-bypass
3t 1c