Add User Autocomplete vulnerabilities
We track 1 vulnerability in Add User Autocomplete products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Add User Autocomplete vulnerabilities
- 8.8 High severity
Add User Autocomplete: Improper Privilege Management
The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselve