Beveiligingsadvies

CVE-2026-80071

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-13 06:00:07

Laatst bijgewerkt 2026-09-13 10:45:53

Toegewezen door WPScan

CVSS-score 7.2

Status PUBLISHED

Beschrijving

The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account, allowing authenticated users with Author-level access and above to assign themselves an arbitrary role and escalate their privileges to Administrator.

← Alle CVE's bekijken Bekijk op cve.org ↗