Back to the CVE list
CVE-2026-14281Suited to automated attack · CISA

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

CVSS score

9.8

EPSS probability

%0.5

Risk score

0.1

Published

23 d ago

OverviewPublic Exploits (3)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
abatsakidis/CVE-2026-14281-check
GitHub

A Windows-friendly, non-destructive Python checker for detecting WordPress installations potentially affected by CVE-2026-14281.

Public PoCSource updated: 27.09.2026 18:30:10
G
langz337/CVE-2026-14281
GitHub

CVE-2026-14281

Public PoCSource updated: 26.09.2026 07:03:55
G
murrez/CVE-2026-14281
GitHub

Unauthenticated privilege escalation in WordPress WAWP (Automation Web Platform) ≤ 4.8.6 via public REST signup and unsanitized wawp_custom_fields → admin. Python check/exploit PoC (PoCbit).

Public PoCSource updated: 25.09.2026 07:43:43

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-14281"