CVE-2026-104767

The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 20260828 . The root cause is that the maybe_add_role_to_user() function unconditionally re-assigns roles from the dfxwcrc_foreign_roles u...

EUVD-2026-100767

The Membership & User Roles for WooCommerce Automatic Role Changer plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the maybeaddroletouser function unconditionally re-assigning every role stored in the dfxwcrcforeignroles user...