TabaPay Gateway <= 1.4.0 - Unauthenticated Privilege Escalation
highThe TabaPay Gateway plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.0. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those intended for...
- CVSS:
- 7.3
- Affected:
- up to 1.4.0
- Fix:
- No patched version reported
- Disclosed:
- Aug 21, 2026