Description Insufficient capability checks made it possible to disable badges a user does not have permission to access. Remediation References CVE-2025-26531 Related Vulnerabilities MySQL CVE-2017-3251 Vulnerability (CVE-2017-3251) WordPress Plugin Social Media Share Buttons & Social Sharing Icons Multiple Unspecified Vulnerabilities (1.2.1) Oracle Application Server CVE-2008-0346 Vulnerability (CVE-2008-0346) WordPress Plugin WP Job Manager Privilege Escalation (1.34.3) WordPress Plugin AffiliateWP SQL Injection (1.5.6) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-863 CVE-2025-26531