Backstage – Customizer Demo Access
Approved changes feed: RSS · Atom
cpe:2.3:a:pixelgrade:backstage_–_customizer_demo_access:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pixelgrade (c7cb7ff4-ab70-50c1-8754-5497df2d0e7c) |
|---|---|
| Product | Backstage – Customizer Demo Access (7b60aef3-ca60-5174-9680-8e8e68a3dcd7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9842 |
vulnerable | 2026-07-29 01:12:09.708837 |
Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities
HIGH (7.5)
The Backstage - Customizer Demo Access plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This is due to the plugin assigning the `manage_options` capability to the `backstage_customizer_user` demo role, which is more permissive than necessary for Customizer-only demo access. This makes it possible for unauthenticated attackers to navigate beyond the Customizer and update arbitrary WordPress options such as `default_role`, leading to privilege escalation.
Published: 2026-07-08T04:30:49.525Z
Updated: 2026-07-08T13:01:09.142Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.