CVE-2026-15312 | CVSS: 8.8 | 严重级别: HIGH
The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the `create()` function's REST endpoint failing to validate the user-supplied `role` parameter against an allowlist of permitted WordPress roles and omitting any `promote_users` capability check before passing the sanitized value directly to `WP_User::set_role()`. This makes it possible for authenticated attackers with `ndpv_manager`-level access and above to create a new WordPress user account with the `administrator` role a
参考链接:
• https://plugins.trac.wordpress.org/browser/propovoice/trunk/includes/Api/Type/Te
• https://plugins.trac.wordpress.org/browser/propovoice/trunk/includes/Api/Type/Te
• https://plugins.trac.wordpress.org/browser/propovoice/trunk/includes/Api/Type/Te
📌 数据来源: NVD 官方