CVE-2026-104748 | wpazleen SimpleForm Plugin up to 3.10.0 on WordPress User Meta save_custom_fields_to_user_meta wp_capabilities privileges management

October 14, 2026 Yanac

A vulnerability, which was classified as critical, has been found in wpazleen SimpleForm Plugin up to 3.10.0 on WordPress. Affected by this vulnerability is the function save_custom_fields_to_user_meta of the component User Meta. The manipulation of the argument wp_capabilities leads to improper privilege management.

This vulnerability is documented as CVE-2026-104748. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More