Memberglut

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-12394 CRITICAL POC PATCH Act Now

Unauthorized role assignment in MemberGlut WordPress plugin versions below 1.1.5 allows unauthenticated attackers to register accounts with arbitrary roles, including administrator, leading to complete site takeover. Publicly available exploit code exists. CVSS 9.8 indicates critical severity with low complexity and no required privileges.

WordPress Privilege Escalation Memberglut

NVD WPScan

CVSS 3.1

9.8

EPSS

0.3%

CVE-2026-12394

EPSS 0% CVSS 9.8

CRITICAL POC PATCH Act Now

Unauthorized role assignment in MemberGlut WordPress plugin versions below 1.1.5 allows unauthenticated attackers to register accounts with arbitrary roles, including administrator, leading to complete site takeover. Publicly available exploit code exists. CVSS 9.8 indicates critical severity with low complexity and no required privileges.

WordPress Privilege Escalation Memberglut

NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy