Description The Simple Membership plugin for WordPress is vulnerable to privilege escalation due to missing input validation on the create_swpm_user function in versions up to, and including, 4.3.4. This makes it possible for unauthenticated attackers to register users with arbitrary membership levels. Since membership levels can be granted a higher user role than subscriber, this can lead to privilege escalation
CPE | Name | Operator | Version |
---|---|---|---|
eq | 4.3.5 |