EUVD-2026-87787

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groupsjoin function deriving group-join eligibility from the ambient post's author capabilities via the global $post-postauthor...