Weakness (CWE)
CWE-266: Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
How to prevent it (2 mitigations)
-
Architecture and Design, Operation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
-
Architecture and Design, Operation
Run your code using the lowest privileges that are required to accomplish the necessary tasks [REF-76]. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment. For example, database applications rarely need to run as the database administrator, especially in day-to-day operations.
Source: MITRE CWE-266
157 results · Clear filters · Feed
-
Critical 9.1
WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1.
-
Critical 9.6
WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0.
-
Critical 9.8
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 7.…
-
Critical 9.8
WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1.
-
Critical 9.8
WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2.
-
Critical 9.9
Oray Pugongying X5 Pro API Authorization run_async_task improper authorization
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run_async_task of the component API Authorization. The manipulation results in improper authorization. The attack can be launched remotely. Th…
-
Critical 9.8
WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.
-
Critical 9.3
Improper Privilege Assignment in boneIO
boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root. This i…
-
Critical 9.8CVE-2026-110372 Scanner template
WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.
-
Critical 9.8
WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.
-
Critical 9.8
WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.
-
Critical 9.4
An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, M…
-
Critical 9.8
WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.
-
Critical 9.4CVE-2026-105445 Public exploit
Docker Hub account conversion could reassign an active personal access token to another user
An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the …
-
Critical 9.8
WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
-
Critical 9.8
WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.
-
Critical 9.8CVE-2026-106610 Public exploit
WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.
-
Critical 10.0
WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
-
Critical 9.8
WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.
-
Critical 9.8
WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.
-
Critical 10.0
Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization
A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be…
-
Critical 9.8CVE-2026-103752 Public exploit
WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.
-
Critical 9.3
In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User I…
-
Critical 9.8
WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
-
Critical 9.8
Apache Syncope: Privilege escalation for admin user via JWT authentication
Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed (at least protocol and key), an attacker can obtain admin privileges after completing a successful authentication a…
-
Critical 9.1
Tenda CP3 Redirect.cpp SetRedirectEnable privileges management
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible.
-
Critical 9.8
WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.
-
Critical 9.8CVE-2026-81294 Public exploit
WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.
-
Critical 9.8
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
-
Critical 9.8
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
-
Critical 9.8
WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.
-
Critical 9.8
WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
-
Critical 9.8
WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Digits <= 9.2 versions.
-
Critical 9.8
WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.
-
Critical 9.8
WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.
-
Critical 9.6
Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by imperso…
-
Critical 9.8
WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
-
Critical 9.8
WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.
-
Critical 9.8
filebrowser through 2.63.16 Privilege Escalation via Signup
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, r…
-
Critical 9.8
WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.