{"affected":[{"defaultStatus":"unaffected","product":"iLeads SMS Gateway by Exsile","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.0.0","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-121866","cwes":["CWE-269"],"description":"The iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in several AJAX actions that update a site option chosen by the request, allowing any authenticated user, such as a subscriber, to change arbitrary WordPress options and escalate to administrator, for example by enabling registration with administrator as the default role.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/b1fca9ef-8839-4030-88ab-c2bcdd79f488/"}],"kev":null,"metrics":[],"modifiedAt":1794031229219,"publishedAt":1794031229219,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/b1fca9ef-8839-4030-88ab-c2bcdd79f488/"}],"remediation":[],"revision":"dbe8e166d57f25d90dac83d654805b1734959b46d84163effe7c1388467cbc9e","sources":[{"modifiedAt":1794031229219,"name":"CNA: WPScan","retrievedAt":1794031733185,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121866"}],"ssvc":null,"status":"published","title":"Exsile SMS Gateway < 2.0.0 - Subscriber+ Privilege Escalation via Arbitrary Option Update","updatedAt":1794031733185}