{"affected":[{"defaultStatus":"unaffected","product":"WP Remote Users Sync","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.3.0","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-123092","cwes":["CWE-269"],"description":"The WP Remote Users Sync WordPress plugin before 2.3.0 does not restrict which user metadata keys may be written through its incoming user synchronisation requests, allowing a site that holds the shared synchronisation keys to set the capabilities of any existing account and escalate it to administrator.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/31ed11db-eb07-4628-8ad8-5b545c6f8fe0/"}],"kev":null,"metrics":[],"modifiedAt":1794463208632,"publishedAt":1794463208632,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/31ed11db-eb07-4628-8ad8-5b545c6f8fe0/"}],"remediation":[],"revision":"78219add41b89072efc5f155e2ec83c4493494651730ccc21e244a84769417b0","sources":[{"modifiedAt":1794463208632,"name":"CNA: WPScan","retrievedAt":1794467316606,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123092"}],"ssvc":null,"status":"published","title":"WP Remote Users Sync < 2.3.0 - Privilege Escalation to Administrator via 'meta' Sync Action","updatedAt":1794467316606}