CVE-2026-0845 | WCFM Plugin up to 6.7.24 on WordPress Setting processing privilege escalation

A vulnerability has been found in WCFM Plugin up to 6.7.24 on WordPress and classified as critical. This impacts the function WCFM_Settings_Controller::processing of the component Setting Handler. Performing a manipulation results in privilege escalation.

This vulnerability is identified as CVE-2026-0845. The attack can be initiated remotely. There is not any exploit available.