CYBERHAWK / CVE / CVE-2026-7106

CVE-2026-7106

WordPress Custom Role Manager Plugin

HIGH CVSS 8.8 vibe

The flaw

Privilege escalation allows authenticated users to modify user roles via profile updates.

What to do

Update plugin beyond version 1.0.0

▸ Scan my repo for CVE-2026-7106

References

NVD CISA KEV OSV GitHub Advisory MITRE News search
First seen 2026-05-01 · Tracked by PickBits CyberHawk · Weekly CVE digest
← All CVEs RSS Scheduled audits