What is the CVSS score of EUVD-2026-38215?

EUVD-2026-38215 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a public PoC exploit available for EUVD-2026-38215?

Yes, a public proof-of-concept exploit is available for EUVD-2026-38215. Prioritise patching immediately.

Is there a patch available for EUVD-2026-38215?

Yes, a patch is available for EUVD-2026-38215. Update the affected software to the latest version immediately.

Vitepos EUVD-2026-38215

| CVE-2026-8157 HIGH

Improper Privilege Management (CWE-269)

2026-06-22 WPScan

GHSA-hq2m-9p82-5366

Privilege Escalation WordPress Vitepos

8.8

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (WPScan) · only source for this CVE.

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jun 22, 2026 - 07:46 EUVD

CVE Published

Jun 22, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

The Vitepos WordPress plugin before 3.4.2 does not properly restrict the roles that can be assigned when creating new users via one of its REST API endpoints, allowing authenticated users with a custom Vitepos WordPress plugin before 3.4.2 role to escalate privileges to administrator.

Articles & Coverage 2

News 3 New WordPress Vulnerabilities - 3 High Severity, All With POC Jun 23, 2026 News 3 New WordPress Vulnerabilities - 3 High Severity, All With POC Jun 22, 2026

Analysis

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

EUVD-2026-38215 vulnerability details – vuln.today

Back

Vitepos EUVD-2026-38215

Severity by source

CVSS VectorVendor: WPScan

Lifecycle Timeline

DescriptionCVE.org

Articles & Coverage 2

Analysis

Unlock full vulnerability intelligence

Share

External POC / Exploit Code