CVE-2026-2631 Datalogics Plugin Privilege Escalation

CVE-2026-2631 is a critical-severity vulnerability. AttackerView checks WordPress sites for it with a live exploit check.

Is my site vulnerable to CVE-2026-2631?

Detects the Datalogics Ecommerce Delivery WordPress plugin before version 2.6.60, where an unauthenticated REST API endpoint allows arbitrary WordPress option updates. Attackers can enable user registration and set the default role to Administrator, gaining full control of the install.