The Nexter Extension plugin for WordPress is vulnerable to privilege escalation (CVE-2026-111114) allowing authenticated users to restore elevated roles due to improper state cleanup during bulk demotions.
Nexter Extension – Security, Performance, Code Snippets & Site Toolkit
wordpress
privilege-escalation
vulnerability
1t
1c