CVE-2026-81294
Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.33%
- CWE
- CWE-266
- Published
- 2026-09-02
- Last modified
- 2026-09-02
Affected products
- Paul Ryan Authorizer
Weakness type
Related vulnerabilities
- CVE-2026-78477 — The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This mak
- CVE-2026-84814 — WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability
- CVE-2026-78330 — Apache Syncope: Privilege escalation for admin user via JWT authentication
- CVE-2026-78267 — WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
- CVE-2026-73390 — WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability
- CVE-2026-73347 — WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability
- CVE-2026-66682 — WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
- CVE-2026-66662 — WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability