CVE-2026-2941 Linksy Search and Replace Subscriber-to-Admin Privilege Escalation

CVE-2026-2941 is a high-severity vulnerability. AttackerView checks WordPress sites for it with a live exploit check.

Is my site vulnerable to CVE-2026-2941?

Detects the Linksy Search and Replace WordPress plugin at version 1.0.4 or earlier, where the linksy_search_and_replace_item_details AJAX action lacks any capability check. Any authenticated subscriber can update arbitrary database tables and values, including wp_capabilities, to escalate their role to administrator.