CVE-2026-115255 | WP Roster Plugin up to 2.34 on WordPress AJAX Actions access control

October 28, 2026 Yanac

A vulnerability, which was classified as critical, was found in WP Roster Plugin up to 2.34 on WordPress. The affected element is an unknown function of the component AJAX Actions. Such manipulation leads to improper access controls.

This vulnerability is referenced as CVE-2026-115255. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More