CVE-2026-32520 - Vulnerability Analysis

Overview

Andrew Munro / AffiliateWP RewardsWP <= 1.0.4 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions.

Severity & Score

Impact

Attackers can escalate their privileges, potentially gaining unauthorized access or control.

Mitigation

Update to the latest version beyond 1.0.4.

References

• https://patchstack.com/database/Wordpress/Plugin/rewardswp/vulnerability/wordpress-rewardswp-plugin-1-0-4-privilege-escalation-vulnerability?_s_id=cve

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner