CVE-2026-123093 | WP Remote Users Sync Plugin up to 2.2.0 on WordPress AJAX Actions authorization

November 13, 2026 Yanac

A vulnerability identified as problematic has been detected in WP Remote Users Sync Plugin up to 2.2.0 on WordPress. This issue affects some unknown processing of the component AJAX Actions. This manipulation causes missing authorization.

This vulnerability is tracked as CVE-2026-123093. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More