CVE-2026-4124 | oliverfriedmann Ziggeo Plugin up to 3.1.1 on WordPress Setting current_user_can authorization

A vulnerability was found in oliverfriedmann Ziggeo Plugin up to 3.1.1 on WordPress. It has been declared as critical. This vulnerability affects the function current_user_can of the component Setting Handler. The manipulation results in missing authorization.

This vulnerability is reported as CVE-2026-4124. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.