CVE-2026-18053

The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7. This is due to a mass-assignment vulnerability in the useraccountmanager function's editprofile branch, where all submitted $POST fields are iterated and directly assigned to the...

CVE-2026-18053 MemberDash <= 1.8.7 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Edit Profile 'id' Parameter

The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7. This is due to a mass-assignment vulnerability in the useraccountmanager function's editprofile branch, where all submitted $POST fields are iterated and directly assigned to the...

CVE-2026-18053

The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 1.8.7 . The root cause is a mass-assignment vulnerability within the user_account_manager() function's edit_profile branch. The application iterates through all submitted $_POST fields an...

EUVD-2026-125905

The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7. This is due to a mass-assignment vulnerability in the useraccountmanager function's editprofile branch, where all submitted $POST fields are iterated and directly assigned to the...

CVE-2026-18053: LearnDash MemberDash: The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7

The MemberDash plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.8.7. This is due to a mass-assignment vulnerability in the useraccountmanager function's editprofile branch, where all submitted $POST fields are iterated and directly assigned to the...