Known vulnerabilities in Unknown WP Roster
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-115257 | WP Roster < 2.36 - Unauthenticated Roster Data Modification | 5.3 Medium | Nov 4, 2026 |
| CVE-2026-115255 | The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of its AJAX actions,… | 5.3 Medium | Oct 28, 2026 |