CVE-2026-15823 | Builderall Plugin up to 3.0.2 on WordPress AJAX disable post_id privileges management

September 10, 2026 Yanac

A vulnerability described as problematic has been identified in Builderall Plugin up to 3.0.2 on WordPress. This impacts the function Disable of the component AJAX Handler. Executing a manipulation of the argument post_id can lead to improper privilege management.

This vulnerability appears as CVE-2026-15823. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More