CVE-2026-12394
Vulnerability Description
The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Unknown
Product
MemberGlut
Discussion (0)
Add Comment
No comments yet. Be the first!