Skip to content
Threat Feed
Subscribe

Vendor

Wpify

1 brief RSS
high advisory

Wpify Woo Plugin Privilege Escalation Vulnerability (CVE-2026-12736)

A privilege escalation vulnerability (CVE-2026-12736) in the Wpify Woo plugin for WordPress, affecting versions up to and including 5.4.16, allows authenticated attackers with 'Shop Manager' capabilities or higher to gain Administrator privileges by exploiting a REST route that overwrites arbitrary WordPress options.

Wpify Woo plugin +1 privilege-escalation wordpress web-vulnerability
1r 2t 1c