SZB-acb094add1
Ak Framework WordPress plugin flagged with privilege escalation flaw (EUVD-2026-114234)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- akbilisim
- Product
- Ak Framework
- First seen
Summary
The EUVD entry EUVD-2026-114234, relayed via a Mastodon post, lists a CVSS v3.1 score of 8.8 for the Ak Framework plugin. The entry says the plugin is vulnerable to privilege escalation in all versions up to and including 2.9.8, due to missing capability checks.
If you use akbilisim
Update Ak Framework to a version newer than 2.9.8 once the vendor releases a fix
Check the EUVD entry for patch status and vendor guidance
Review WordPress user accounts for unexpected role or privilege changes
What the sources say 1
· Mastodon: “The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including, 2.9.8.” Source