CVE-2023-0824

CVE-2023-0824 affects the WordPress plugin “User registration & user profile – UserPlus” (versions

CVE-2024-9519

CVE-2024-9519 affects the WordPress plugin UserPlus (versions up to 2.0). Root cause: an improper capability check in the function save_metabox_form . Impact: authenticated attackers with Editor+ permissions can update the registration form role to Administrator , causing privilege escalation and...