| Package | Affected versions | Patched versions |
|---|---|---|
| user registration & membership | < 4.1.2< 5.1.2 | 4.1.25.1.2 |
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free