Description Insufficient capability checks made it possible to disable badges a user does not have permission to access. Remediation References CVE-2025-26531 Related Vulnerabilities WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14945) WordPress Data Processing Errors Vulnerability (CVE-2014-9034) WebLogic CVE-2020-13956 Vulnerability (CVE-2020-13956) Drupal Core 8.8.x Remote Code Execution (8.8.0 - 8.8.11) MySQL CVE-2015-2617 Vulnerability (CVE-2015-2617) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-863 CVE-2025-26531