Add User Autocomplete < 1.2 - Authenticated (Subscriber+) Privilege Escalation
mediumThe Add User Autocomplete plugin for WordPress is vulnerable to Privilege Escalation in all versions up to 1.2. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges...
- CVSS:
- 6.3 (Wordfence)
- Affected:
- up to 1.2
- Fixed in:
- 1.2
- Disclosed:
- Sep 14, 2026