{"affected":[{"defaultStatus":"unaffected","product":"WP Remote Users Sync","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.2.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-123097","cwes":["CWE-269"],"description":"The WP Remote Users Sync WordPress plugin before 2.2.1 does not restrict which account fields a synchronised site may set when it creates or updates users, allowing a site holding the shared synchronisation keys to assign the administrator role, modify any existing account and write arbitrary user metadata, bypassing the receiving site's role and metadata restrictions.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/9df17b10-261c-4d93-a24d-76b10b65456f/"}],"kev":null,"metrics":[],"modifiedAt":1794549608059,"publishedAt":1794549608059,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/9df17b10-261c-4d93-a24d-76b10b65456f/"}],"remediation":[],"revision":"e0139f7664bff1a0907564555ebb8055952272ba62ea6f05f2a73bffd2bcc30c","sources":[{"modifiedAt":1794549608059,"name":"CNA: WPScan","retrievedAt":1794550145725,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123097"}],"ssvc":null,"status":"published","title":"WP Remote Users Sync < 2.2.1 - Privilege Escalation to Administrator via 'create' and 'update' Sync Actions","updatedAt":1794550145725}