{"uuid": "3c2472b2-bfcb-487e-a8d8-afa38af38723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8157", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116792585922539614", "content": "Vitepos WordPress plugin <3.4.2 has a HIGH severity privilege escalation vuln (CVE-2026-8157). Auth users with custom Vitepos roles can become admins via REST API. Restrict API access & monitor for patches. https://radar.offseq.com/threat/cve-2026-8157-cwe-269-improper-privilege-managemen-ad086b248eb210ce #OffSeq #WordPress #CVE20268157 #Infosec", "creation_timestamp": "2026-06-22T07:30:35.542089Z"}