CVE-2026-41558

The WP Migration Plugin DB & Files in versions up to 1.16.1 contains a subscriber bypass vulnerability that allows unauthorized users to gain elevated privileges, potentially leading to unauthorized access to sensitive data. This high-severity flaw poses a significant risk to WordPress sites utilizing the affected plugin, particularly those with user roles that should be restricted. Website administrators and security teams should prioritize patching or updating this plugin to mitigate the risk of exploitation.