CVE-2026-16135 | Vibemes VibeBP Plugin up to 1.9.9.8.1 on WordPress Email Notification Settings set_email_notification_settings wp_capabilities privileges management

A vulnerability was found in Vibemes VibeBP Plugin up to 1.9.9.8.1 on WordPress. It has been declared as critical. Affected by this issue is the function set_email_notification_settings of the component Email Notification Settings. Such manipulation of the argument wp_capabilities leads to improper privilege management.

This vulnerability is documented as CVE-2026-16135. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More