Paul vulnerabilities and threats

CVE-2026-34901 is a critical vulnerability in Paul iControlWP versions up to and including 5.5.3 that allows unauthenticated privilege escalation. This means an attacker can gain elevated privileges without authentication. The vulnerability is categorized under CWE-266, indicating incorrect privilege assignment. No official patch or remediation guidance is currently provided by the vendor.