CVE-2026-24971 - WordPress Search & Go theme <= 2.8 - Privilege Escalation vulnerability

Back Back to CVE browser

CRITICAL

WordPress Search & Go theme <= 2.8 - Privilege Escalation vulnerability

Published Mar 25, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.32%

Description

Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through <= 2.8.

Affected products

Vendor Elated-Themes Product Search & Go Default
unaffected
Affected
- ≥ 0, ≤ 2.8

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Elated-Themes	Search & Go	unaffected	Affected ≥ 0, ≤ 2.8

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-266

Incorrect Privilege Assignment

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-15582		Advisory
https://patchstack.com/database/Wordpress/Theme/searchgo/vulnerability/wordpress-search-go-theme-2-8-privilege-escalation-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Mar 25, 2026

Updated Apr 28, 2026

Reserved Jan 28, 2026

Link CVE-2026-24971

CISA Vulnrichment

Updated Mar 26, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2026-24971

Red Hat

No data

ENISA EUVD

Assigner Patchstack

Published Mar 25, 2026

Updated Apr 28, 2026

Link EUVD-2026-15582

GitHub

No data