Binary MLM Plan WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Binary MLM Plan plugin for WordPress, affecting all versions through 3.0. The issue arises because the plugin automatically assigns the manage_bmp capability to users with the bmp_user role upon registration through the plugin's form. This flaw allows unauthenticated users to register and gain access to manage the plugin's settings.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain elevated privileges, enabling them to manage the settings of the Binary MLM Plan plugin.

Remediation

There is no known patch available for this vulnerability. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.