CyberSecBulletin

Ontraport vulnerabilities

We track 1 vulnerability in Ontraport products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Ontraport vulnerabilities

  • 8.8 High severity

    PilotPress: Improper Privilege Management

    CVE-2026-85659Ontraport

    The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the `update_cc_details()` AJAX handler forwards an attacker-supplied `username` parame