Privilege escalation in WordPress plugins
Privilege escalation lets a user with a low-level account give themselves more power, typically turning a subscriber or customer account into an administrator. Some of these also work during registration, so the attacker signs up as an admin.
Once someone is an administrator they can install plugins, which means they can run any code they like. Sites with open registration or a shop with customer accounts are the most exposed.
What to do: update the plugin. Check Users → Administrator for accounts you do not recognise, and remove them. If you do not need public registration, turn it off.
Worried a plugin bug was used on your site?
The free scan reads the public side of your site and looks for spam pages, hidden redirects, injected scripts and blacklist entries. No login, no install, about a minute.
Newest Privilege escalation records
465 on record for the plugins we track; the newest 100 are below. Data as of 2026-11-04.
“Affected” is the version range the source gives. “Fixed in” is the version the source names, or (marked *) the first wordpress.org release after the last affected version. Each CVE id links to the full record on the plugin’s page.
-
high 8.8 User Frontend
Privilege escalation
-
high 8.8 Rox Appointment Booking
Privilege escalation
-
medium 6.5 UsersWP
Privilege escalation
-
medium 4.2 Essential Addons for Elementor
Privilege escalation
-
medium 6.3 User Profile Builder
Privilege escalation
-
high 8.8 affects latest 6.5.2 WP BASE Booking of Appointments, Services and…
Privilege escalation
-
critical 9.8 SMS Alert
Privilege escalation
-
high 7.4 Essential Addons for Elementor
Privilege escalation
-
high 8.8 Export and Import Users and Customers
Privilege escalation
-
medium 6.3 BeyondSEO
Privilege escalation
-
high 7.2 Event Booking Manager for WooCommerce
Privilege escalation
-
high 7.2 GoSMTP
Privilege escalation
-
high 7.2 Duplicator
Privilege escalation
-
high 8.8 aBlocks
Privilege escalation
-
high 7.1 User Profile Builder
Privilege escalation
-
high 8.1 Advanced Custom Fields
Privilege escalation
-
high 8.8 User Profile Builder
Privilege escalation
-
high 8.1 WP User Manager
Privilege escalation
-
medium 6.4 Essential Addons for Elementor
Privilege escalation
-
high 8.1 OTP Login With Phone Number, OTP Verification
Privilege escalation
-
critical 9.8 OttoKit
Privilege escalation
-
high 7.2 Salon Booking System
Privilege escalation
-
medium 4.8 WP Compress
Privilege escalation
-
critical 9.8 Theme My Login
Privilege escalation
-
high 8.8 PilotPress
Privilege escalation
-
high 8.1 User Profile Builder
Privilege escalation
-
high 7.5 Nexter Extension
Privilege escalation
-
high 7.5 InstaWP Connect
Privilege escalation
-
critical 9.8 MailOptin
Privilege escalation
-
critical 9.8 My Calendar
Privilege escalation
-
high 8.1 Customer Email Verification for WooCommerce
Privilege escalation
-
critical 9.8 ACF Frontend Admin by DynamiApps
Privilege escalation
-
high 8.8 FluentCRM
Privilege escalation
-
medium 5.4 WholesaleX
Privilege escalation
-
critical 9.8 FluentCRM
Privilege escalation
-
critical 9.8 Frontend Dashboard
Privilege escalation
-
critical 9.8 SimpleForm
Privilege escalation
-
high 7.5 Bit integrations
Privilege escalation
-
high 7.5 Membership & User Roles for WooCommerce (Autom…
Privilege escalation
-
high 8.8 Mobile builder
Privilege escalation
-
critical 9.8 AI Copilot
Privilege escalation
-
high 8.2 Forminator Forms
Privilege escalation
-
critical 9.8 miniOrange OTP Login, Verification and SMS Not…
Privilege escalation
-
high 7.2 WooCommerce
Privilege escalation
-
high 8.1 Groundhogg
Privilege escalation
-
high 8.1 SMS Alert
Privilege escalation
-
high 8.8 FooSales
Privilege escalation
-
high 8.8 Appointment Booking Plugin
Privilege escalation
-
high 8.8 Groundhogg
Privilege escalation
-
critical 9.1 Blocksy Companion
Privilege escalation
-
medium 5.4 Academy LMS
Privilege escalation
-
medium 5.6 Ultimate Member
Privilege escalation
-
medium 6.8 Redux Framework
Privilege escalation
-
high 8.8 FooSales
Privilege escalation
-
critical 9.8 Frontend Dashboard
Privilege escalation
-
high 8.1 SMS Alert
Privilege escalation
-
high 7.2 PublishPress Capabilities
Privilege escalation
-
high 7.2 PDF Invoices & Packing Slips for WooCommerce
Privilege escalation
-
high 8.8 Salon Booking System
Privilege escalation
-
high 8.8 WP User Profiles
Privilege escalation
-
high 8.1 GiveWP
Privilege escalation
-
high 7.2 Import and export users and customers
Privilege escalation
-
high 8.8 Ultimate Member
Privilege escalation
-
high 8.8 Groundhogg
Privilege escalation
-
critical 9.8 Authorizer
Privilege escalation
-
high 8.8 ByteCoreStack
Privilege escalation
-
high 8.8 WPC Shop as a Customer for WooCommerce
Privilege escalation
-
high 8.8 ByteCoreStack
Privilege escalation
-
high 7.2 SureCart
Privilege escalation
-
medium 6.3 FluentBoards
Privilege escalation
-
critical 9.8 Estatik Real Estate Plugin
Privilege escalation
-
high 7.2 Vitepos
Privilege escalation
-
high 7.5 Import and export users and customers
Privilege escalation
-
high 7.4 User Frontend
Privilege escalation
-
high 8.8 Groups
Privilege escalation
-
high 7.3 Optima Express IDX
Privilege escalation
-
high 8.8 Knit Pay
Privilege escalation
-
critical 9.8 Wawp Country Code & Chat Widget for WooCommerce
Privilege escalation
-
medium 6.8 CMB2
Privilege escalation
-
critical 9.8 Paytium
Privilege escalation
-
high 8.8 Import and export users and customers
Privilege escalation
-
high 7.2 CMP
Privilege escalation
-
high 7.2 Import and export users and customers
Privilege escalation
-
high 7.2 Import and export users and customers
Privilege escalation
-
medium 6.6 Forminator Forms
Privilege escalation
-
high 8.1 SAML Single Sign On
Privilege escalation
-
high 7.2 WP Import Export Lite
Privilege escalation
-
high 8.8 Mapster WP Maps
Privilege escalation
-
high 7.2 Booking Calendar
Privilege escalation
-
high 7.2 All-in-One WP Migration and Backup
Privilege escalation
-
critical 9.8 JetFormBuilder
Privilege escalation
-
medium 5.4 Simple Membership
Privilege escalation
-
high 7.5 User Registration & Membership
Privilege escalation
-
high 7.2 User Registration & Membership
Privilege escalation
-
high 8.8 Gato GraphQL
Privilege escalation
-
high 8.8 SMS Alert
Privilege escalation
-
high 8.1 SiteSkite
Privilege escalation
-
high 7.2 Registration Form for WooCommerce
Privilege escalation
-
high 8.0 Bulk Password Reset
Privilege escalation
-
high 7.2 PublishPress Capabilities
Privilege escalation
Other types
Cross-site scripting (XSS) · Missing authorization · Cross-site request forgery (CSRF) · SQL injection · Sensitive data exposure · PHP object injection · Remote code execution · Arbitrary file upload · Path traversal and file read · Authentication bypass · File inclusion · Server-side request forgery (SSRF) · Arbitrary file deletion · Open redirect · Denial of service · Content injection
Browse vulnerabilities
Common types: Cross-site scripting (XSS) · Missing authorization · Cross-site request forgery (CSRF) · SQL injection · Sensitive data exposure · PHP object injection · Privilege escalation · Remote code execution
Where this data comes from
- Vulnerabilities: NIST National Vulnerability Database (NVD), checked 2026-11-04. This product uses data from the NVD API but is not endorsed or certified by the NVD.
- Plugin versions, update dates and install counts: the wordpress.org Plugins API.
- These lists cover the 3,948 plugins in our catalogue, not every plugin on wordpress.org. We only list a CVE for a plugin when its references or its advisory name that exact plugin, so a few real issues may be missing. Spot an error? Email Daniel.