WordPress WP Membership Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WordPress WP Membership plugin, specifically in versions through 1.6.4. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and potentially full control over the website.

Remediation

Users are advised to mitigate this vulnerability immediately. Patchstack has issued a mitigation rule to block attacks until an official fix is available. For more information on how to apply this mitigation, visit the Patchstack website.