Vendor

Userplace

1 brief RSS

Userplace WordPress plugin: Unauthenticated administrative account creation (CVE-2026-110963)

The Userplace WordPress plugin through 1.2.0 fails to perform authorization checks on an exposed AJAX action, allowing unauthenticated attackers to create administrator accounts and modify site settings for full site takeover.

Userplace web-vulnerability wordpress cve-2026-110963 authorization-bypass

3t 1c 8h ago