User Registration & Membership WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the User Registration & Membership WordPress plugin, affecting versions prior to 4.1.2. When the Membership Addon is enabled, the plugin allows users to arbitrarily set their account roles. This flaw enables unauthenticated users to gain administrative privileges on the site.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain admin privileges on the WordPress site.

Remediation

Users can update to User Registration & Membership version 4.1.2 or later to address this vulnerability.