CVE-2026-45216— WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability
Possible ATT&CK Techniques 1AI
T1548.003 · Sudo and Sudo CachingAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| StoreApps | Smart Manager | n/a≤ 8.85.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-45216
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incorrect Privilege Assignment vulnerability in StoreApps Smart Manager allows Privilege Escalation. This issue affects Smart Manager: from n/a through 8.85.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
特权授予不正确
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| StoreApps | Smart Manager | n/a ~ 8.85.0 | - |
II. Public POCs for CVE-2026-45216
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-45216
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-45216 (1)
IV. Related Vulnerabilities
Same vendor: StoreApps
- CVE-2026-24365
WordPress Stock Manager for WooCommerce plugin < 3.6.0 - Cro - CVE-2025-22710
WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vul - CVE-2024-49687
WordPress Smart Manager plugin <= 8.45.0 - Broken Access Con - CVE-2023-5663
News Announcement Scroll <= 9.0.0 - Authenticated (Contribu - CVE-2023-35091
WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vuln
Same weakness: CWE-266
- CVE-2026-42758
WordPress WebinarIgnition plugin < 4.08.253 - Privilege Esca - CVE-2026-42731
WordPress miniorange otp verification plugin <= 5.4.9 - Priv - CVE-2025-32747
Dell PowerFlex Manager <=4.6.2 特权提升漏洞 - CVE-2026-48172
LiteSpeed User-End cPanel Plugin 安全漏洞 - CVE-2026-22315
Mesalvo Meona Client Launcher Component和Mesalvo Meona Server
V. Comments for CVE-2026-45216
No comments yet