CVE-2026-49063: WordPress Listdom plugin <= 5.5.0 - Privilege Escalation vulnerability

Q: Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or existing plugin privileges to exploit an affected site.

Q: Which Listdom versions are affected?

Listdom versions 5.5.0 and earlier are affected. The provided data does not identify the first fixed version.

Q: What impact can exploitation have?

The vulnerability is classified as privilege escalation and has high severity with low impacts to confidentiality, integrity, and availability. The provided data does not specify which WordPress role or capabilities an attacker can obtain.

Published Jun 15, 2026

Updated

Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.

Affected Software

1 affected component

wordpress/listdom<=5.5.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/listdom to a version that resolves this vulnerability.
Fixed in 5.6.0

Event History

Jun 15, 2026

CVE Published

via MITRE·08:19 PM

Data Sourced

via MITRE·08:19 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or existing plugin privileges to exploit an affected site.

Which Listdom versions are affected?

Listdom versions 5.5.0 and earlier are affected. The provided data does not identify the first fixed version.

What impact can exploitation have?

The vulnerability is classified as privilege escalation and has high severity with low impacts to confidentiality, integrity, and availability. The provided data does not specify which WordPress role or capabilities an attacker can obtain.

CVE-2026-49063: WordPress Listdom plugin <= 5.5.0 - Privilege Escalation vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which Listdom versions are affected?

What impact can exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which Listdom versions are affected?

What impact can exploitation have?