Beveiligingsadvies

CVE-2026-12394

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-27 06:00:01

Laatst bijgewerkt 2026-07-27 15:50:40

Toegewezen door WPScan

CVSS-score 9.8

Status PUBLISHED

Beschrijving

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.

← Alle CVE's bekijken Bekijk op cve.org ↗