Threats tagged 'ghsa-p66m-599j-249c'

CVE-2026-28111 is a high-severity vulnerability in WPMU DEV's Forminator plugin, affecting versions up to and including 1.56.0. It involves incorrect privilege assignment that allows users with Contributor-level access to escalate their privileges. The vulnerability has a CVSS score of 8.8, indicating a significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently documented. There are no known exploits in the wild at this time.