CVE-2024-9265

The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to and including 5.4.6 . The root cause is that the plugin fails to properly restrict the roles that can be set during registration through the echo_check_post_header_sen...