UrbanGo Membership WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the UrbanGo Membership plugin for WordPress, affecting versions through 1.0.4. The issue arises because the plugin allows users registering new accounts to choose their own roles by using the 'user_register_role' field. This vulnerability enables unauthenticated attackers to create accounts with administrative privileges.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrative privileges on the WordPress site.

Remediation

Users are advised to update the UrbanGo Membership plugin to version 1.1 or a newer patched version.