CVE-2026-105894 Details
Description
The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including, 2.9.8. This is due to missing capability checks in the ajax_refresh_nonce and ak_admin_ajax handlers before passing attacker-controlled option names and values to update_option(). This makes it possible for unauthenticated attackers to update arbitrary WordPress options including users_can_register and default_role to escalate privileges to administrator by enabling user registration with administrator as the default role.
A privilege escalation vulnerability has been identified in the Ak Framework plugin for WordPress, specifically in the Newsy - Viral News & Magazine WordPress Theme. This vulnerability exists in all versions through 2.9.8 and is caused by inadequate capability checks in the ajax_refresh_nonce and ak_admin_ajax handlers. The lack of proper validation allows unauthenticated attackers to manipulate option names and values, potentially leading to unauthorized changes in WordPress settings. Exploitation of this vulnerability could enable attackers to update critical options such as users_can_register and default_role, effectively granting them administrator privileges by allowing user registration with an administrator role.
Users are advised to update the Ak Framework plugin to version 2.9.9 or later.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 30, 2026CISA-ADP
Assessed Oct 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.akbilisim.com/newsy/changelog/#v299 | [email protected] | Release NotesVendor |
| https://www.wordfence.com/threat-intel/vulnerabilities/id/d9f99ab9-eb22-4766-81f2-647af1229815?source=cve | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-269 | Improper Privilege Management | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Ak Framework | <= 2.9.8 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 30, 2026 | CVE Modified | CISA-ADP |
| Oct 30, 2026 | New CVE Received | [email protected] |