Search vulnerabilities

Results 1

Export CSV
CVE-2026-12394

MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator

The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Products