rootpwn

high · CVSS v3 7.6

CVE-2026-97277

CVE-2026-97277 exposes a broken access control flaw in the Social Boost WordPress plugin, allowing unauthorized users to perform privileged

Overview

CVE-2026-97277 exposes a broken access control flaw in the Social Boost WordPress plugin, allowing unauthorized users to perform privileged actions. The vulnerability exists in all versions up to 3.6.2 and can be exploited by anyone with access to the site. It is rated high severity with a CVSS v3 score of 7.6.

Description

Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.

Impact

The flaw permits attackers to bypass subscriber restrictions, potentially exposing sensitive content and modifying site settings. This compromises confidentiality and integrity of the website’s data and can lead to unauthorized content publication. Site administrators and subscribers are directly impacted.

Remediation

Upgrade Social Boost to version 3.6.3 or later. Verify that subscriber roles have only the intended capabilities and audit role permissions. If the plugin is not required, disable or uninstall it. Monitor site logs for suspicious activity.

Risk context

The vulnerability is classified as high severity with a CVSS v3 score of 7.6, indicating a significant risk to affected sites. Defenders should prioritize patching to mitigate potential exploitation.

Affected products

  • Social Boost

Scores

Severity
high
CVSS v2
8
CVSS v3
7.6
CVSS v4
—
EPSS
—

broken-access-control wordpress plugin high-severity social-boost privilege-escalation

← All CVEs

Related CVEs

high

CVE-2026-104912

MISP before v2.5.48 has an authorization flaw in correlation handling during attribute searches. Correlated attributes and events can be authorized using a stale distribution snapshot instead of the live event access control list. This matters because restricted or unpublished events may remain visible to authenticated users who no longer have permission.

View analysis

high

CVE-2026-94544

CVE-2026-94544 exposes a cache sharing flaw in Next.js 16.3.0‑16.3.8 that allows unauthenticated users to see unpublished draft content or see published content in draft mode. The vulnerability arises when Cache Components or experimental.useCache are enabled and cached functions return draft‑dependent data. It can lead to accidental disclosure of sensitive content on public sites.

View analysis

high

CVE-2026-94591

Armatura One stores database and message‑broker credentials in an install configuration file encrypted with AES‑128‑CBC. The encryption key and IV are hard‑coded and identical across all installations, allowing an attacker who obtains the installation package to decrypt any configuration file. This flaw can expose critical credentials used to access the database and broker.

View analysis

high

CVE-2026-94592

Armatura One's database initialization uses a fixed vendor password for the superuser, allowing anyone with OS access to log in as the database administrator. This flaw can lead to full database compromise on installations where the default password remains unchanged. It is critical for deployments to change the superuser password immediately.

View analysis