CVE-2026-28190

Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.

Credits

Jamaal ahmed | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/prolancer-element/vulnerability/wordpress-prolancer-element-plugin-1-4-8-broken-access-control-vulnerability?_s_id=cve