CVE-2025-15100

The CVE concerns the JAY Login & Register plugin for WordPress. A Privilege Escalation affects versions prior to 2.6.04, where an authenticated user (Subscriber-level or higher) can update arbitrary user meta via the jay_panel_ajax_update_profile function, enabling elevation to administrator. Thi...