Privilege Escalation Vulnerability in Pubjet Plugin for WordPress

CVE-2026-103479

What is CVE-2026-103479?

The Pubjet plugin for WordPress has a critical vulnerability that allows authenticated users with Subscriber-level access or higher to escalate their privileges. This occurs through the checkToken() AJAX handler, which fails to verify nonces or perform capability checks. By manipulating the token GET parameter, attackers can overwrite the plugin's REST API credentials with a chosen value. This not only elevates their permissions to that of an authorized Pubjet API client but also allows them to access restricted functions such as creating, modifying, and deleting posts. Subsequent requests are authenticated using the compromised token, reinforcing the attack and further jeopardizing site integrity.

References