Skip to content
OpenAdvisories

Vendor

connectordev

1 known vulnerabilities.

Products

bLoyal: Loyalty & Promotions by bLoyal 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-15001

    bLoyal: Loyalty & Promotions by bLoyal <= 3.1.611.78 - Authenticated (Subscriber+) Privilege Escalation via Unprotected AJAX API URL Settings

    The bLoyal: Loyalty & Promotions by bLoyal plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.611.78. This is due to the AJAX actions `save_bloyal_configuration_data` and `save_bloyal_accesskeyverification_dat…

    connectordev bLoyal: Loyalty & Promotions by bLoyal Web / CMS