{"uuid": "02048f85-e1b5-4de0-9f9b-1744544567d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103694", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420845968693297", "content": "CVE-2026-103694 Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103694https://wpscan.com/vulnerability/5d087920-26f3-4c71-bfcb-ae9a70cc407f/#CVE_2026_103694#bot", "creation_timestamp": "2026-10-11T06:25:20.622954Z"}