Vendor
The VibeBP plugin for WordPress is vulnerable to privilege escalation in versions up to 1.9.9.8.1, allowing authenticated attackers to grant themselves administrative rights.