Skip to content
Threat Feed
Subscribe

Vendor

BLoyal

1 brief RSS
high advisory

Privilege Escalation in bLoyal: Loyalty & Promotions WordPress Plugin

The bLoyal: Loyalty & Promotions plugin for WordPress contains an unauthenticated configuration modification and privilege escalation vulnerability, CVE-2026-15001, allowing low-privileged users to assume administrator accounts.

Loyalty & Promotions by bLoyal
1r 1t 1c