WordPress Plugin Vulnerabilities

WP Roster < 2.36 - Unauthenticated Roster Data Modification

Description

The plugin does not perform any capability or nonce checks before writing its stored roster data, allowing unauthenticated attackers to overwrite, wipe or restore the content of any roster.

Proof of Concept

Affects Plugins

Plugin icon
wp-roster
Fixed in 2.36

References

CVE
CVE-2026-115257

Classification

Type
ACCESS CONTROLS
OWASP top 10
A5: Broken Access Control
CWE
CWE-284
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Erwan LR (WPScan)
Submitter
Erwan LR (WPScan)
Verified
Yes
WPVDB ID
9edf44aa-e528-4ac3-afea-a4f4451b7e1d

Timeline

Publicly Published
2026-11-02 (about 2 days ago)
Added
2026-11-02 (about 1 day ago)
Last Updated
2026-11-02 (about 1 day ago)

Other

Published
Title
Published
2024-03-18
Title
s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions < 240315 - Information Exposure
Published
2025-03-11
Title
Page Builder: Pagelayer – Drag and Drop website builder < 1.9.9 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode
Published
2026-07-10
Title
LatePoint < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking Funnel
Published
2021-05-08
Title
ThemeHigh WooCommerce Wishlist and Comparison < 1.0.5 - Unauthorised AJAX call
Published
2020-09-10
Title
Email Subscribers & Newsletters < 4.5.6 - Unauthenticated email forgery/spoofing