Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
highThe Uix UserCenter plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their privileges beyond those intended for t...
- CVSS:
- 7.3 (Wordfence)
- Affected:
- up to 1.0.3
- Fix:
- No patched version reported
- Disclosed:
- Aug 31, 2026