WordPress Plugin Vulnerabilities
Authorizer < 3.16.0 - Unauthenticated Privilege Escalation
Description
The Authorizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.15.3. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those intended for their role.
Affects Plugins
Fixed in 3.16.0 References
Classification
Type
PRIVESC
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Raphael P. Cigana
Verified
No
WPVDB ID
Timeline
Publicly Published
2026-10-01 (about 15 days ago)
Added
2026-10-08 (about 8 days ago)
Last Updated
2026-10-08 (about 8 days ago)
