CVE-2026-92975Published
Groundhogg <= 4.8.3 - Unauthenticated Privilege Escalation to Support User Identity Confusion
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-92975 · Microsoft / collected KEV context
cve-program · CVE-2026-92975
- https://www.wordfence.com/threat-intel/vulnerabilities/id/c355658a-515a-48ed-a114-6a202e23e34b?source=cve
- https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.8.1/admin/help/help-page.php#L250
- https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.8.1/admin/help/help-page.php#L224
- https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.8.1/admin/help/help-page.php#L238
- https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.8.1/admin/help/help-page.php#L298
- https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.8.1/admin/help/help-page.php#L599
- https://github.com/groundhoggwp/groundhogg/commit/4b413aa6e
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.