{"api_version":"1","generated_at":"2026-11-08T15:49:06+00:00","cve":"CVE-2026-110963","urls":{"html":"https://cve.report/CVE-2026-110963","api":"https://cve.report/api/cve/CVE-2026-110963.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-110963","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-110963"},"summary":{"title":"Userplace <= 1.2.0 - Unauthenticated Privilege Escalation","description":"The Userplace  WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly exposes the nonce that protects it, allowing unauthenticated attackers to create an administrator account or write arbitrary site options, leading to full site takeover.","state":"PUBLISHED","assigner":"WPScan","published_at":"2026-11-08 06:17:04","updated_at":"2026-11-08 06:17:04"},"problem_types":["CWE-269 Improper Privilege Management"],"metrics":[],"references":[{"url":"https://wpscan.com/vulnerability/c30f71d3-2ec4-4bee-8864-f7c19cf6fcb7/","name":"https://wpscan.com/vulnerability/c30f71d3-2ec4-4bee-8864-f7c19cf6fcb7/","refsource":"contact@wpscan.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110963","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110963","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Unknown","product":"Userplace","version":"affected 1.2.0 semver","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Naoki Kawahigashi","lang":"en"},{"source":"CNA","value":"WPScan","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unknown","product":"Userplace","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.2.0","status":"affected","version":"0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"Naoki Kawahigashi"},{"lang":"en","type":"coordinator","value":"WPScan"}],"descriptions":[{"lang":"en","value":"The Userplace  WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly exposes the nonce that protects it, allowing unauthenticated attackers to create an administrator account or write arbitrary site options, leading to full site takeover."}],"problemTypes":[{"descriptions":[{"description":"CWE-269 Improper Privilege Management","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-08T06:00:31.251Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan"},"references":[{"tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/c30f71d3-2ec4-4bee-8864-f7c19cf6fcb7/"}],"source":{"discovery":"EXTERNAL"},"title":"Userplace <= 1.2.0 - Unauthenticated Privilege Escalation","x_generator":{"engine":"WPScan CVE Generator"}}},"cveMetadata":{"assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","assignerShortName":"WPScan","cveId":"CVE-2026-110963","datePublished":"2026-11-08T06:00:31.251Z","dateReserved":"2026-10-15T09:39:12.746Z","dateUpdated":"2026-11-08T06:00:31.251Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-08 06:17:04","lastModifiedDate":"2026-11-08 06:17:04","problem_types":["CWE-269 Improper Privilege Management"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"110963","Ordinal":"1","Title":"Userplace <= 1.2.0 - Unauthenticated Privilege Escalation","CVE":"CVE-2026-110963","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"110963","Ordinal":"1","NoteData":"The Userplace  WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly exposes the nonce that protects it, allowing unauthenticated attackers to create an administrator account or write arbitrary site options, leading to full site takeover.","Type":"Description","Title":"Userplace <= 1.2.0 - Unauthenticated Privilege Escalation"}]}}}