WP Remote Users Sync vulnerabilities
We track 2 vulnerabilities in WP Remote Users Sync products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest WP Remote Users Sync vulnerabilities
- 7.5 High severity
WP Remote Users Sync: Improper Privilege Management
The WP Remote Users Sync WordPress plugin before 2.2.1 does not restrict which account fields a synchronised site may set when it creates or updates users, allowing a site holding the shared synchronisation keys to assign the administrator role, modify any exi
- 7.5 High severity
WP Remote Users Sync: Improper Privilege Management
The WP Remote Users Sync WordPress plugin before 2.3.0 does not restrict which user metadata keys may be written through its incoming user synchronisation requests, allowing a site that holds the shared synchronisation keys to set the capabilities of any exist