CVE-2026-0912

The Toret Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'trman_save_option' function and on the 'trman_save_option_items' in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.

• CWE-269

• https://plugins.trac.wordpress.org/browser/toret-manager/tags/1.2.7/admin/class-toret-manager-admin.php#L210
• https://plugins.trac.wordpress.org/browser/toret-manager/tags/1.2.7/admin/class-toret-manager-admin.php#L227
• https://plugins.trac.wordpress.org/changeset/3464839/toret-manager
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4b2fc891-f3c6-4f4f-ad52-0a1a949eed25?source=cve

Published

Feb 19, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0906Incorrect security UI in Google Chrome on Android prior to …9.8
• CVE-2026-0907Incorrect security UI in Split View in Google Chrome prior t…9.8
• CVE-2026-0908Use after free in ANGLE in Google Chrome prior to 144.0.7559…8.8
• CVE-2026-0909The WP ULike plugin for WordPress is vulnerable to Insecure …5.3
• CVE-2026-0910The wpForo Forum plugin for WordPress is vulnerable to PHP O…8.8
• CVE-2026-0911The Hustle – Email Marketing, Lead Generation, Optins, Popup…7.5
• CVE-2026-0913The User Submitted Posts – Enable Users to Submit Posts from…6.4
• CVE-2026-0914The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable…6.4
• CVE-2026-0915Calling getnetbyaddr or getnetbyaddr_r with a configured nss…7.5
• CVE-2026-0916The Related Posts by Taxonomy plugin for WordPress is vulner…6.4
• CVE-2026-0918The Tapo C100 v5, C220 v1 and C520WS v2 cameras’ HTTP servic…7.5
• CVE-2026-0919The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 camer…7.5