EUVD-2026-75262
GHSA-xq47-g3qj-2hcj
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
PR:L corrects the input's PR:H - contributor is a low-privilege role; C:N because only integrity and availability are impacted via option overwrites.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user input, allowing users with a role as low as contributor to modify arbitrary WordPress options, which can be used to deactivate Notiqoo WordPress plugin before 1.4.14 and to lock every administrator out of the site.
AnalysisAI
Missing capability checks in the Notiqoo WordPress plugin (before 1.4.14) expose multiple AJAX endpoints to any authenticated contributor-level user, allowing arbitrary WordPress option writes. Because the option name is constructed directly from user-supplied input with no validation or authorization gate, a contributor can overwrite any site option - including disabling the Notiqoo plugin itself or corrupting the admin email/user-role mappings to lock every administrator out of the WordPress dashboard. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an active WordPress user account with at minimum the 'contributor' role on the target site - this is a low-privilege authenticated condition, not unauthenticated. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS vector (PR:H) conflicts with the description, which explicitly states exploitation is possible with a contributor role - a low-privilege account, not a high-privilege one. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update the Notiqoo plugin to version 1.4.14 or later, which introduces proper capability checks on all affected AJAX actions and sanitizes the option name input - this is the sole confirmed fix per the WPScan advisory (https://wpscan.com/vulnerability/030939ee-9aa9-4082-934e-c9a07fc3dfc3/). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-863 – Incorrect Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today