Unrated severityNVD Advisory· Published Oct 11, 2026
CVE-2026-103694
CVE-2026-103694
Description
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.4.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.