What is GHSA-p54f-4qj5-25h3?

GHSA-p54f-4qj5-25h3 is a security advisory published by GitHub Security Advisories with Medium severity. The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before...

Which CVE IDs does GHSA-p54f-4qj5-25h3 cover?

GHSA-p54f-4qj5-25h3 covers the following CVE IDs: CVE-2026-115257. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p54f-4qj5-25h3?

GHSA-p54f-4qj5-25h3 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-p54f-4qj5-25h3MediumCVSS 5.3

The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before...

Vendor

GitHub Security Advisories

Published

November 4, 2026

Last Modified

November 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-115257 →

📋 Description

The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored roster data, allowing unauthenticated attackers to overwrite, wipe or restore the content of any roster.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-115257
https://wpscan.com/vulnerability/9edf44aa-e528-4ac3-afea-a4f4451b7e1d
https://github.com/advisories/GHSA-p54f-4qj5-25h3