The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| User_registration_&_membership | Wpeverest | * | 4.1.2 (excluding) |
| User_registration_&_membership | Wpeverest | * | 5.1.2 (excluding) |