[{"data":1,"prerenderedAt":41},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-15309":3},{"l":4,"details":22,"weitere":25,"indexierbar":10,"updated":40},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"slug":18,"bereich":19,"schweregrad":20,"art":21,"produktLabel":8},"CVE-2026-15309","gemeldet","","CourseCure Courses (WordPress-Plugin)","2026-11-12",false,[12],"CWE-269",{"version":14,"score":15,"severity":16,"vector":17},"3.1",8.8,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","cve-2026-15309","web","hoch","Fehlerhafte Verwaltung von Rechten",{"description":23,"refs":24},"The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update_option() with attacker-controlled keys and values without any authorization verification. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges to administrator by setting the default_role WordPress option to 'administrator' and users_can_register to '1', then registering a new account that is automatically granted full administrator access.",[],[26,30,33],{"cve":27,"status":6,"produktLabel":28,"vendor":7,"product":28,"art":29,"bereich":19,"schweregrad":20,"score":15,"epss":-1,"added":9,"ransomware":10},"CVE-2026-13764","Masterstudy (WordPress-Plugin)","Fehlende Berechtigungsprüfung",{"cve":31,"status":6,"produktLabel":32,"vendor":7,"product":32,"art":21,"bereich":19,"schweregrad":20,"score":15,"epss":-1,"added":9,"ransomware":10},"CVE-2026-16135","VibeBP (WordPress-Plugin)",{"cve":34,"status":6,"produktLabel":35,"vendor":7,"product":35,"art":36,"bereich":19,"schweregrad":37,"score":38,"epss":-1,"added":39,"ransomware":10},"CVE-2026-126542","WWBN AVideo","Umgehung der Anmeldung durch Vortäuschen einer Identität","kritisch",9.3,"2026-11-11","2026-11-12T13:05:11.283Z",1794488740331]