Launchpad.net

CVE 2016-10968

The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.

See the CVE page on Mitre.org for more details.