CVE-2023-4404

CVE-2023-4404: Privilege escalation in Donation Forms by Charitable for WordPress. Vulnerable in Charitable versions up to 1.7.0.12 due to insufficient restriction in update_core_user, allowing unauthenticated attackers to specify their role during registration. Wordfence and Red Hat advisories d...