critical9.8
CVE-2026-12394
The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an acc…
Impact
The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise.
Affected products
| Product | Affected versions |
|---|---|
| MemberGlut WordPress Plugin | before 1.1.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.