CVE-2026-115257
WP Roster < 2.36 - Unauthenticated Roster Data Modification
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored roster data, allowing unauthenticated attackers to overwrite, wipe or restore the content of any roster.
| Vendor | unknown |
| Product | wp roster |
| Published | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wp roster
Be the first to know when new unknown vulnerabilities affecting unknown wp roster are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Roster
0 < 2.36
References
Credits
Erwan LR (WPScan) WPScan