WordPress Plugin Vulnerabilities

Frisbii Pay < 1.8.2.1 - Contributor+ Privilege Escalation

Description

The plugin is vulnerable to Privilege Escalation. This makes it possible for authenticated attackers, with Contributor-level access and above, to elevate their privileges.

Affects Plugins

Plugin icon
reepay-checkout-gateway
Fixed in 1.8.2.1

References

CVE
CVE-2026-56038
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/349d960b-cc62-47c6-b0d5-a199e1e679db

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
7.2 (High)

Miscellaneous

Original Researcher
Denver Jackson
Verified
No
WPVDB ID
153f1b1f-6517-4e03-bce7-d9af874f5efc

Timeline

Publicly Published
2026-06-24 (about 1 month ago)
Added
2026-07-02 (about 26 days ago)
Last Updated
2026-07-02 (about 26 days ago)

Other

Published
Title
Published
2026-01-12
Title
xSmart <= 1.2.9.4 - Subscriber+ Privilege Escalation
Published
2025-04-23
Title
Configurator Theme Core <= 1.4.7 - Authenticated (Subscriber+) Privilege Escalation
Published
2026-04-10
Title
BuddyPress Groupblog < 1.9.4 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Group Blog IDOR
Published
2025-11-10
Title
Custom Fields Account Registration For Woocommerce < 1.3 - Authenticated (Author+) Privilege Escalation
Published
2026-05-26
Title
Genemy - Creative Minimal Landing Page Builder for Digital Startup Design Studio Agency in Marketing <= 1.6.6 - Authenticated (Subscriber+) Privilege Escalation