CVE-2026-115257 | WP Roster Plugin up to 2.35 on WordPress access control

November 4, 2026 Yanac

A vulnerability was found in WP Roster Plugin up to 2.35 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation results in improper access controls.

This vulnerability is known as CVE-2026-115257. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More