CVE-2026-15001: Privilege Escalation in bLoyal: Loyalty & Promotions by bLoyal WordPress Plugin
The bLoyal: Loyalty & Promotions by bLoyal WordPress plugin is vulnerable to Privilege Escalation (CVE-2026-15001, CVSS 8.8) in all versions up to 3.1.611.78. Authenticated attackers with Subscriber-level access can exploit this vulnerability to escalate privileges to Administrator, potentially leading to full site compromise. Immediate patching is recommended.