CVE-2026-81759: Wordpress Insufficient Capability For Update Optioncve-2026-81759-wordpress-insufficient-capability-for-update-option
Global options are modified after an access control check that permits low-privilege capabilities such as 'edit_posts' alongside 'manage_options'. Non-administrator users can modify site-wide configuration. Ensure sensitive option updates require 'manage_options'.