PT-2026-50332

CVE-2026-49058

·

Published

2026-06-08

·

Updated

2026-06-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions LoginPress Pro versions prior to 6.2.3
Description An issue exists in the LoginPress Pro plugin for WordPress that allows unauthenticated attackers to perform privilege escalation, enabling them to elevate their access levels within the system.
Recommendations Update LoginPress Pro to version 6.2.3 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-266: Incorrect Privilege Assignment
Related identifiers
CVE-2026-49058
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com