WP EXtra < 6.3 - Subscriber+ .htaccess File Modification

Description The plugin is missing capability checks on the register function, allowing authenticated users, with roles as low as subscriber, to modify the contents of the site’s .htaccess files, leading to potential remote code execution.