← العودة للجدول
CVE-2026-111114
CVE-2026-111114 — The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit
📅 2026-10-16
🟠 High 🔥 No NVD Vulnerability WordPress CVSS 7.5

📋 الوصف الكامل

The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the `/?reset-view` handler in `role_switcher_to_view_admin_as()` performs no nonce or capability check when the supplied username matches the authenticated caller, and because the pl

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-111114

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.7.11

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←