CVE-2026-85659 | PilotPress Plugin up to 2.0.43 on WordPress AJAX handler update_cc_details username privileges management

October 16, 2026 Yanac

A vulnerability identified as critical has been detected in PilotPress Plugin up to 2.0.43 on WordPress. Impacted is the function update_cc_details of the component AJAX handler. This manipulation of the argument Username causes improper privilege management.

The identification of this vulnerability is CVE-2026-85659. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More