{"cvss":0.0,"datePublished":"2026-09-09T00:00:00Z","dateUpdated":"2026-09-09T00:00:00Z","description":"The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the add_user_in_waiting_list() function registered on the wp_ajax_yith_wcwtl_add_user action being missing both a capability check and a nonce verification, and using parse_str() + extract() to import attacker-controlled variables from $_POST['params'] that are then passed to wp_create_user() and $user->set_role(). This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator by creating a new user account and assigning it the administrator role.","dueDate":"","id":"CVE-2026-14359","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"YITH WooCommerce Waitlist Premium","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"  Improper Privilege Management","vendor":"YITH"}