CVE-2026-14482

Summary

The 多说社会化评论框 plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2. The vulnerability exists due to a missing capability and nonce check on a directly web-accessible API endpoint, combined with a trivially forgeable HMAC-SHA1 signature keyed on an always-empty WordPress option, which allows the endpoint's update_option handler to pass attacker-controlled option and value parameters directly to WordPress's update_option function without any allowlist or sanitization. This makes it possible for unauthenticated attackers to update arbitrary WordPress options — such as setting default_role to administrator and enabling open registration — and subsequently register an account with full administrator privileges.

Affected Software

VendorProductVersion RangeStatus
shen2多说社会化评论框0 <= 1.2affected

Weaknesses

  • CWE-269: CWE-269 Improper Privilege Management

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References