Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-14328

1 brief RSS
high advisory

Privilege Escalation in Eazy Plugin Manager for WordPress (CVE-2026-14328)

The Eazy Plugin Manager - Powerful Plugin Management Solution for WordPress plugin for WordPress (versions up to and including 4.4.1) is vulnerable to privilege escalation (CVE-2026-14328), allowing authenticated attackers with Subscriber-level access to read sensitive WordPress options, compute an authentication key, and obtain Administrator authentication cookies, leading to full site takeover if the plugin's remote connection feature is configured.

Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress <= 4.4.1 wordpress web privilege-escalation cve-2026-14328
2r 1t 1c