Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-13
VibeBP - Security Vulnerability (CVE-2026-16135)
The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the set_email_notification_settings() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to grant themselves administrator privileges by updating their own 'wp_capabilities' user meta value.
PLUGIN
VibeBP
CVE-2026-16135
Risk Score
Threat Entry
Updated 2026-06-17
Vibebp - Privilege Escalation (CVE-2024-56040)
Incorrect Privilege Assignment vulnerability in VibeThemes VibeBP vibebp allows Privilege Escalation.This issue affects VibeBP: from n/a through
PLUGIN
Vibebp
CVE-2024-56040
Risk Score
Threat Entry
Updated 2026-06-17
Vibebp - SQL Injection (CVE-2024-56039)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.7.7.
PLUGIN
Vibebp
CVE-2024-56039
Risk Score
Threat Entry
Updated 2026-06-17
Vibebp - SQL Injection (CVE-2024-56041)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP vibebp allows SQL Injection.This issue affects VibeBP: from n/a through < 1.9.9.5.1.
PLUGIN
Vibebp
CVE-2024-56041
Risk Score