Membership & User Roles for WooCommerce (Automatic Role Changer) vulnerabilities
1 known vulnerability in Membership & User Roles for WooCommerce (Automatic Role Changer) from Davefx. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Membership & User Roles for WooCommerce…: Improper Privilege Management
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the `maybe_add_role_to_user()` function unconditionally re-assigning ever