CVE-2026-115257
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 04, 2026
Vendor
unknown
Description
The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored roster data, allowing unauthenticated attackers to overwrite, wipe or restore the content of any roster.