CVE-2026-12394
MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.
CVSS 3.1 · 9.8 Critical
EPSS 2.1%
KEV · Not listed
Vendors
Products