CVE-2026-123093
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-11-13
Modified: 2026-11-13
First seen: 2026-11-13
Status: pending_score
Description
The WP Remote Users Sync WordPress plugin before 2.2.1 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete the WP Remote Users Sync WordPress plugin before 2.2.1's entire activity log.
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| Unknown | WP Remote Users Sync | 0 < 2.2.1 |